9ccb617b310c105aee24c96cf5032ebe72b09d3363d89585cfd2279a777c0d74

Analysis

max time kernel
131s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 06:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
Size

1.0MB
MD5

69f9eee44842e42e6bfeb8a0fbe45191
SHA1

f7a46d331617edf2957fd71f5034928a509fb070
SHA256

9ccb617b310c105aee24c96cf5032ebe72b09d3363d89585cfd2279a777c0d74
SHA512

52246f40bfae81a63738600b5452661784ab71367b1b750082793e7c86fbdf52d4d931c899ffdca0a3352a6abde99c7060bba3326dbaaf047c45733b49b0a753
SSDEEP

24576:Sfx24kjJhh8j114u2kzXmJGiyKyDZ08P+SjEQApQuRoECD:SJ2444R14utmJd8Z0YrDAppqlD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe

pid process

2788 69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
2788 69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe

pid process

2788 69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
2788 69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe

pid	process
2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe

pid	process
2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2788
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4648
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1796
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4472
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4784
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3628
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1668
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1336
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4436
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4208
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3516
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3156
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3608
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4252
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4236
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4152
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2444
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1688
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3408
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:900
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2480
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2324
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:836
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4844
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1348
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2116
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4320
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4804
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1976
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1836
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1560
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4280
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1176
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1852
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2588
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3936
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1092
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1540
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1580
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2016
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1660
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2056
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2424
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4820
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:64
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:740
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1860
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4916
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2816
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:620
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3612
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5080
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3392
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1676
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2372
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2656
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3960
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5096
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2852
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2716
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:848
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5084
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2212
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2832
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5044
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4276
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5088
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4668
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:404
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2980
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3240
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4240
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4552
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2264
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4864
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1488
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3836
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1792
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1356
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4008
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:232
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2700
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4324
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4588
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2924
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3020
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3148
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4464
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:920
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1120
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:372
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4016
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2932
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4456
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1352
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3196
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:208
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4064
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2668
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4608
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:896
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3760
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2612
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2228
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3404
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:60
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4520
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:980
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3976
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3300
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4104
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1496
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:400
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1740
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2288
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4564
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:384
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3916
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3500
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4912
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3000
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4044
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2044
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1968
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3400
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3908
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2684
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3484
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2300
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3788
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4664
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4132
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:316
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:412
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1772
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1484
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:628
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:448
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3904
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:632
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4524
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:452
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:528
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:728
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2632
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1896
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4948
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4248
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1476
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:5052
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1736
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4072
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2672
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2824
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3340
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3364
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3864
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3592
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:3692
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1428
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4352
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2100
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1648
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1448
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1084
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4672
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2440
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1856
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4452
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4824
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4544
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1816
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:616
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:4336
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:1576
- C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
  2⤵
  PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2788-0-0x0000000003940000-0x0000000003945000-memory.dmp

Filesize
20KB

Download

description	pid	process	target process
PID 2788 wrote to memory of 4648	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4648	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4648	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1796	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1796	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1796	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4472	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4472	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4472	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4784	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4784	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4784	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3628	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3628	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3628	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1668	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1668	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1668	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1336	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1336	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1336	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4436	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4436	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4436	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4208	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4208	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4208	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2092	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2092	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2092	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3516	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3516	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3516	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3156	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3156	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3156	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3608	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3608	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3608	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4252	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4252	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4252	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4236	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4236	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4236	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4152	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4152	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 4152	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2444	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2444	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2444	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1688	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1688	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 1688	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3408	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3408	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 3408	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 900	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 900	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 900	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2480	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2480	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2480	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe
PID 2788 wrote to memory of 2324	2788	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe	69f9eee44842e42e6bfeb8a0fbe45191_JaffaCakes118.exe