Analysis
- max time kernel
78s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 19:52
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Delf.gk.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Delf.gk.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_Trojan.Win32.Delf.gk.exe
- Size 67KB
- Sample261018-ylp2wah16w
- SHA256 56596d6de4d5fd844a2dcf83497ecf3de1b22cda6b07c0c931f83bf8a13c9c9b
- MD5 dedac11fcf48424cf49879f020cea400
- SHA1 82d692e5f583596d5e4812bd20e8b8e8c24220dd
- SHA512 99931c42e7b2c06b1a3766e0209de4cbe6632a59a1c6c2a9b17522b5db57d0eb3064a6ae2e404add2c09a289c13308885ed5b67f686455fbda43b9cc9d233271
- SSDEEP 1536:r5GD/XPgQGcvZORS3g+wL9UTNLaGUXq7cM7:r5GzISZsdL9MNLa1Xcd7
- TLSH T1FA63D0C2FBF44EA9F9D6257332B649119D363FA64431D84E10C8233C3A359118D36FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Delf.gk.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 4700 jaffacakes118_Trojan.Win32.Delf.gk.exe 4700 jaffacakes118_Trojan.Win32.Delf.gk.exe 4700 jaffacakes118_Trojan.Win32.Delf.gk.exe 4700 jaffacakes118_Trojan.Win32.Delf.gk.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3048 wrote to memory of 1508 3048 jaffacakes118_Trojan.Win32.Delf.gk.exe 89 PID 1508 wrote to memory of 2020 1508 jaffacakes118_Trojan.Win32.Delf.gk.exe 90 PID 2020 wrote to memory of 5072 2020 jaffacakes118_Trojan.Win32.Delf.gk.exe 91 PID 5072 wrote to memory of 2588 5072 jaffacakes118_Trojan.Win32.Delf.gk.exe 92 PID 2588 wrote to memory of 4700 2588 jaffacakes118_Trojan.Win32.Delf.gk.exe 93 PID 4700 wrote to memory of 1996 4700 jaffacakes118_Trojan.Win32.Delf.gk.exe 94 PID 1996 wrote to memory of 4832 1996 jaffacakes118_Trojan.Win32.Delf.gk.exe 95 PID 4832 wrote to memory of 4088 4832 jaffacakes118_Trojan.Win32.Delf.gk.exe 96 PID 4088 wrote to memory of 1604 4088 jaffacakes118_Trojan.Win32.Delf.gk.exe 97 PID 1604 wrote to memory of 5308 1604 jaffacakes118_Trojan.Win32.Delf.gk.exe 98 PID 5308 wrote to memory of 1548 5308 jaffacakes118_Trojan.Win32.Delf.gk.exe 99 PID 1548 wrote to memory of 3820 1548 jaffacakes118_Trojan.Win32.Delf.gk.exe 100 PID 3820 wrote to memory of 5988 3820 jaffacakes118_Trojan.Win32.Delf.gk.exe 101 PID 5988 wrote to memory of 1608 5988 jaffacakes118_Trojan.Win32.Delf.gk.exe 102 PID 1608 wrote to memory of 4856 1608 jaffacakes118_Trojan.Win32.Delf.gk.exe 103 PID 4856 wrote to memory of 6036 4856 jaffacakes118_Trojan.Win32.Delf.gk.exe 104 PID 6036 wrote to memory of 2596 6036 jaffacakes118_Trojan.Win32.Delf.gk.exe 105 PID 2596 wrote to memory of 2452 2596 jaffacakes118_Trojan.Win32.Delf.gk.exe 106 PID 2452 wrote to memory of 2548 2452 jaffacakes118_Trojan.Win32.Delf.gk.exe 107 PID 2548 wrote to memory of 1036 2548 jaffacakes118_Trojan.Win32.Delf.gk.exe 108 PID 1036 wrote to memory of 1520 1036 jaffacakes118_Trojan.Win32.Delf.gk.exe 109 PID 1520 wrote to memory of 1972 1520 jaffacakes118_Trojan.Win32.Delf.gk.exe 110 PID 1972 wrote to memory of 1876 1972 jaffacakes118_Trojan.Win32.Delf.gk.exe 111 PID 1876 wrote to memory of 5676 1876 jaffacakes118_Trojan.Win32.Delf.gk.exe 112 PID 5676 wrote to memory of 3372 5676 jaffacakes118_Trojan.Win32.Delf.gk.exe 113 PID 3372 wrote to memory of 2856 3372 jaffacakes118_Trojan.Win32.Delf.gk.exe 114 PID 2856 wrote to memory of 124 2856 jaffacakes118_Trojan.Win32.Delf.gk.exe 115 PID 124 wrote to memory of 3940 124 jaffacakes118_Trojan.Win32.Delf.gk.exe 116 PID 3940 wrote to memory of 5752 3940 jaffacakes118_Trojan.Win32.Delf.gk.exe 117 PID 5752 wrote to memory of 2976 5752 jaffacakes118_Trojan.Win32.Delf.gk.exe 118 PID 2976 wrote to memory of 2888 2976 jaffacakes118_Trojan.Win32.Delf.gk.exe 119 PID 2888 wrote to memory of 2808 2888 jaffacakes118_Trojan.Win32.Delf.gk.exe 120 PID 2808 wrote to memory of 2400 2808 jaffacakes118_Trojan.Win32.Delf.gk.exe 121 PID 2400 wrote to memory of 2404 2400 jaffacakes118_Trojan.Win32.Delf.gk.exe 122 PID 2404 wrote to memory of 4488 2404 jaffacakes118_Trojan.Win32.Delf.gk.exe 123 PID 4488 wrote to memory of 5624 4488 jaffacakes118_Trojan.Win32.Delf.gk.exe 124 PID 5624 wrote to memory of 3692 5624 jaffacakes118_Trojan.Win32.Delf.gk.exe 125 PID 3692 wrote to memory of 4668 3692 jaffacakes118_Trojan.Win32.Delf.gk.exe 126 PID 4668 wrote to memory of 6088 4668 jaffacakes118_Trojan.Win32.Delf.gk.exe 127 PID 6088 wrote to memory of 5144 6088 jaffacakes118_Trojan.Win32.Delf.gk.exe 128 PID 5144 wrote to memory of 1552 5144 jaffacakes118_Trojan.Win32.Delf.gk.exe 129 PID 1552 wrote to memory of 2348 1552 jaffacakes118_Trojan.Win32.Delf.gk.exe 130 PID 2348 wrote to memory of 2276 2348 jaffacakes118_Trojan.Win32.Delf.gk.exe 131 PID 2276 wrote to memory of 1680 2276 jaffacakes118_Trojan.Win32.Delf.gk.exe 132 PID 1680 wrote to memory of 1200 1680 jaffacakes118_Trojan.Win32.Delf.gk.exe 133 PID 1200 wrote to memory of 5564 1200 jaffacakes118_Trojan.Win32.Delf.gk.exe 134 PID 5564 wrote to memory of 4940 5564 jaffacakes118_Trojan.Win32.Delf.gk.exe 135 PID 4940 wrote to memory of 4240 4940 jaffacakes118_Trojan.Win32.Delf.gk.exe 136 PID 4240 wrote to memory of 1396 4240 jaffacakes118_Trojan.Win32.Delf.gk.exe 137 PID 1396 wrote to memory of 1392 1396 jaffacakes118_Trojan.Win32.Delf.gk.exe 138 PID 1392 wrote to memory of 3020 1392 jaffacakes118_Trojan.Win32.Delf.gk.exe 139 PID 3020 wrote to memory of 5984 3020 jaffacakes118_Trojan.Win32.Delf.gk.exe 140 PID 5984 wrote to memory of 1464 5984 jaffacakes118_Trojan.Win32.Delf.gk.exe 141 PID 1464 wrote to memory of 2836 1464 jaffacakes118_Trojan.Win32.Delf.gk.exe 142 PID 2836 wrote to memory of 2028 2836 jaffacakes118_Trojan.Win32.Delf.gk.exe 143 PID 2028 wrote to memory of 4916 2028 jaffacakes118_Trojan.Win32.Delf.gk.exe 144 PID 4916 wrote to memory of 4812 4916 jaffacakes118_Trojan.Win32.Delf.gk.exe 145 PID 4812 wrote to memory of 1232 4812 jaffacakes118_Trojan.Win32.Delf.gk.exe 146 PID 1232 wrote to memory of 912 1232 jaffacakes118_Trojan.Win32.Delf.gk.exe 147 PID 912 wrote to memory of 5800 912 jaffacakes118_Trojan.Win32.Delf.gk.exe 148 PID 5800 wrote to memory of 1728 5800 jaffacakes118_Trojan.Win32.Delf.gk.exe 149 PID 1728 wrote to memory of 3288 1728 jaffacakes118_Trojan.Win32.Delf.gk.exe 150 PID 3288 wrote to memory of 1444 3288 jaffacakes118_Trojan.Win32.Delf.gk.exe 151 PID 1444 wrote to memory of 996 1444 jaffacakes118_Trojan.Win32.Delf.gk.exe 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3048 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1508 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2020 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5072 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2588 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe6⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4700 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe7⤵
- Suspicious use of WriteProcessMemory
PID:1996 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe8⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4832 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe9⤵
- Suspicious use of WriteProcessMemory
PID:4088 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe10⤵
- Suspicious use of WriteProcessMemory
PID:1604 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe11⤵
- Suspicious use of WriteProcessMemory
PID:5308 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe12⤵
- Suspicious use of WriteProcessMemory
PID:1548 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe13⤵
- Suspicious use of WriteProcessMemory
PID:3820 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe14⤵
- Suspicious use of WriteProcessMemory
PID:5988 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe15⤵
- Suspicious use of WriteProcessMemory
PID:1608 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe16⤵
- Suspicious use of WriteProcessMemory
PID:4856 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe17⤵
- Suspicious use of WriteProcessMemory
PID:6036 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe18⤵
- Suspicious use of WriteProcessMemory
PID:2596 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe19⤵
- Suspicious use of WriteProcessMemory
PID:2452 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe20⤵
- Suspicious use of WriteProcessMemory
PID:2548 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe21⤵
- Suspicious use of WriteProcessMemory
PID:1036 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe22⤵
- Suspicious use of WriteProcessMemory
PID:1520 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe23⤵
- Suspicious use of WriteProcessMemory
PID:1972 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe24⤵
- Suspicious use of WriteProcessMemory
PID:1876 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe25⤵
- Suspicious use of WriteProcessMemory
PID:5676 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe26⤵
- Suspicious use of WriteProcessMemory
PID:3372 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe27⤵
- Suspicious use of WriteProcessMemory
PID:2856 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe28⤵
- Suspicious use of WriteProcessMemory
PID:124 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe29⤵
- Suspicious use of WriteProcessMemory
PID:3940 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe30⤵
- Suspicious use of WriteProcessMemory
PID:5752 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe31⤵
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe32⤵
- Suspicious use of WriteProcessMemory
PID:2888 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe33⤵
- Suspicious use of WriteProcessMemory
PID:2808 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe34⤵
- Suspicious use of WriteProcessMemory
PID:2400 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe35⤵
- Suspicious use of WriteProcessMemory
PID:2404 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe36⤵
- Suspicious use of WriteProcessMemory
PID:4488 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe37⤵
- Suspicious use of WriteProcessMemory
PID:5624 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe38⤵
- Suspicious use of WriteProcessMemory
PID:3692 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe39⤵
- Suspicious use of WriteProcessMemory
PID:4668 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe40⤵
- Suspicious use of WriteProcessMemory
PID:6088 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe41⤵
- Suspicious use of WriteProcessMemory
PID:5144 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe42⤵
- Suspicious use of WriteProcessMemory
PID:1552 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe43⤵
- Suspicious use of WriteProcessMemory
PID:2348 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe44⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2276 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe45⤵
- Suspicious use of WriteProcessMemory
PID:1680 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe46⤵
- Suspicious use of WriteProcessMemory
PID:1200 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe47⤵
- Suspicious use of WriteProcessMemory
PID:5564 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe48⤵
- Suspicious use of WriteProcessMemory
PID:4940 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe49⤵
- Suspicious use of WriteProcessMemory
PID:4240 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe50⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1396 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe51⤵
- Suspicious use of WriteProcessMemory
PID:1392 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe52⤵
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe53⤵
- Suspicious use of WriteProcessMemory
PID:5984 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe54⤵
- Suspicious use of WriteProcessMemory
PID:1464 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe55⤵
- Suspicious use of WriteProcessMemory
PID:2836 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe56⤵
- Suspicious use of WriteProcessMemory
PID:2028 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe57⤵
- Suspicious use of WriteProcessMemory
PID:4916 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe58⤵
- Suspicious use of WriteProcessMemory
PID:4812 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe59⤵
- Suspicious use of WriteProcessMemory
PID:1232 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe60⤵
- Suspicious use of WriteProcessMemory
PID:912 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe61⤵
- Suspicious use of WriteProcessMemory
PID:5800 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe62⤵
- Suspicious use of WriteProcessMemory
PID:1728 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe63⤵
- Suspicious use of WriteProcessMemory
PID:3288 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe64⤵
- Suspicious use of WriteProcessMemory
PID:1444 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe65⤵PID:996
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe66⤵PID:3928
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe67⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe68⤵PID:2700
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe69⤵PID:2396
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe70⤵PID:2116
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe71⤵PID:4724
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe72⤵PID:5716
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe73⤵PID:4816
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe74⤵PID:2392
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe75⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe76⤵PID:5796
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe77⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe78⤵PID:1260
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe79⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe80⤵PID:4464
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe81⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe82⤵PID:2336
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe83⤵PID:3884
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe84⤵PID:4100
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe85⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe86⤵PID:4484
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe87⤵PID:4904
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe88⤵PID:3540
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe89⤵PID:5088
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe90⤵PID:4072
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe91⤵PID:4476
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe92⤵PID:3408
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe93⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe94⤵PID:5560
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe95⤵
- System Location Discovery: System Language Discovery
PID:1800 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe96⤵PID:2608
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe97⤵PID:704
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe98⤵PID:4656
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe99⤵PID:3148
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe100⤵PID:5104
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe101⤵PID:8
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe102⤵PID:1632
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe103⤵PID:3668
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe104⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe105⤵PID:1792
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe106⤵PID:3608
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe107⤵
- System Location Discovery: System Language Discovery
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe108⤵PID:4608
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe109⤵PID:5136
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe110⤵PID:4348
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe111⤵PID:4728
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe112⤵PID:1528
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe113⤵PID:3380
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe114⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe115⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe116⤵PID:4344
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe117⤵PID:5876
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe118⤵PID:1820
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe119⤵PID:264
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe120⤵PID:4948
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe121⤵PID:5776
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Delf.gk.exe122⤵PID:5256
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-