Analysis
- max time kernel
7s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
12/10/2026, 21:33
General
- Target jaffacakes118_Worm.Win32.Agent.cp.exe
- Size 1.0MB
- Sample261012-1ephwaxv8j
- SHA256 39fdbda0cdbf1d678126ab1ef00ac0e4514344d9a233ffae795ad775e0ba72fd
Score
10/10
Malware Config
Signatures
- Family: Sfone
Sfone is a worm written in C++.
- Detects Sfone worm 64 IoCs
- Executes dropped EXE 4 IoCs
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 1 IoCs
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Drops file in Program Files directory 15 IoCs
- Drops file in Windows directory 14 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 6 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 16 IoCs
- Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Worm.Win32.Agent.cp.exe"2⤵
-
-
C:\Windows\mssrv.exeC:\Windows\mssrv.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\mssrv.exe"C:\Windows\mssrv.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\mssrv.exe"C:\Windows\mssrv.exe"3⤵
- Executes dropped EXE
-
-
-
C:\Windows\mssrv.exe"C:\Windows\mssrv.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
italian animal blowjob [bangbus] .mpg.exe
tyrkish handjob xxx licking mature .mpeg.exe
mssrv.exe
memory/772-149-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1060-199-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1092-148-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1156-213-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1200-191-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1224-160-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1396-169-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1408-171-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1488-218-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1500-159-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-0-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-373-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-163-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-303-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-407-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-147-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1540-230-0x0000000000400000-0x000000000041C000-memory.dmp
memory/1756-219-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2184-217-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2260-209-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2476-173-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2572-182-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2800-215-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2820-192-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2856-200-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2984-212-0x0000000000400000-0x000000000041C000-memory.dmp
memory/3012-180-0x0000000000400000-0x000000000041C000-memory.dmp
memory/3228-183-0x0000000000400000-0x000000000041C000-memory.dmp
memory/3276-207-0x0000000000400000-0x000000000041C000-memory.dmp
memory/3528-164-0x0000000000400000-0x000000000041C000-memory.dmp
memory/3824-161-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4052-185-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4136-177-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4180-176-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4372-187-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4408-172-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4436-197-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4504-166-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4660-175-0x0000000000400000-0x000000000041C000-memory.dmp
memory/4672-190-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5028-202-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5036-150-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5048-179-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5176-170-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5232-184-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5252-165-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5268-168-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5288-181-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5344-198-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5408-220-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5480-162-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5584-214-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5728-186-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5744-195-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5752-201-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5752-216-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5848-208-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5868-210-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5936-211-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6008-196-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6180-221-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6244-222-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6392-223-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6448-235-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6456-229-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6468-227-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6484-236-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6512-238-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6572-240-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6636-239-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6740-260-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6752-241-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6768-265-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6800-253-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6856-262-0x0000000000400000-0x000000000041C000-memory.dmp
memory/6864-248-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7060-263-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7108-264-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7196-271-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7212-267-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7236-268-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7268-266-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7500-273-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7500-251-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7512-250-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7512-272-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7544-275-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7552-274-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7552-252-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7632-276-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7800-279-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7900-281-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7908-280-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7944-291-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7952-283-0x0000000000400000-0x000000000041C000-memory.dmp
memory/7972-290-0x0000000000400000-0x000000000041C000-memory.dmp
memory/8032-282-0x0000000000400000-0x000000000041C000-memory.dmp
memory/8072-288-0x0000000000400000-0x000000000041C000-memory.dmp
memory/8084-289-0x0000000000400000-0x000000000041C000-memory.dmp
memory/8152-292-0x0000000000400000-0x000000000041C000-memory.dmp
memory/8160-293-0x0000000000400000-0x000000000041C000-memory.dmp