b1ab161c5dbf5117b35b85f365f0b73d4df19075ccae7bc1bf983c32e3e1467d

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
Size 1.1MB
Sample240613-be4v5aybpf
SHA256 b1ab161c5dbf5117b35b85f365f0b73d4df19075ccae7bc1bf983c32e3e1467d
MD5 a349bef0ed9119089be25909b2dbcef2
SHA1 eab5160d95bb06feaa1dab2e60fa3f058cb4eaef
SHA512 be1811d14cbe7c3db3463e66b945c58e99dfedb753b20eea50a0ecbbdea9b0db10f464c2ce6789e1143df467fecec3761e4e656916ea5d5b143e644dda712ec7
SSDEEP 24576:juqLIMOpZvOhVoUfe1u1N8468xORvm4widQjBZCxto6HRAkpdP:juqLIMOpxOheUguIj8xOB/ijGxG6HB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1624 wrote to memory of 2004	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	80
PID 1624 wrote to memory of 2004	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	80
PID 1624 wrote to memory of 2004	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	80
PID 1624 wrote to memory of 4932	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	81
PID 1624 wrote to memory of 4932	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	81
PID 1624 wrote to memory of 4932	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	81
PID 1624 wrote to memory of 4244	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	82
PID 1624 wrote to memory of 4244	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	82
PID 1624 wrote to memory of 4244	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	82
PID 1624 wrote to memory of 3800	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	83
PID 1624 wrote to memory of 3800	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	83
PID 1624 wrote to memory of 3800	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	83
PID 1624 wrote to memory of 3004	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	84
PID 1624 wrote to memory of 3004	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	84
PID 1624 wrote to memory of 3004	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	84
PID 1624 wrote to memory of 1096	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	85
PID 1624 wrote to memory of 1096	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	85
PID 1624 wrote to memory of 1096	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	85
PID 1624 wrote to memory of 3584	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	86
PID 1624 wrote to memory of 3584	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	86
PID 1624 wrote to memory of 3584	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	86
PID 1624 wrote to memory of 4080	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	87
PID 1624 wrote to memory of 4080	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	87
PID 1624 wrote to memory of 4080	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	87
PID 1624 wrote to memory of 536	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	88
PID 1624 wrote to memory of 536	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	88
PID 1624 wrote to memory of 536	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	88
PID 1624 wrote to memory of 1136	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	89
PID 1624 wrote to memory of 1136	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	89
PID 1624 wrote to memory of 1136	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	89
PID 1624 wrote to memory of 4120	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	90
PID 1624 wrote to memory of 4120	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	90
PID 1624 wrote to memory of 4120	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	90
PID 1624 wrote to memory of 3700	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	91
PID 1624 wrote to memory of 3700	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	91
PID 1624 wrote to memory of 3700	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	91
PID 1624 wrote to memory of 3736	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	92
PID 1624 wrote to memory of 3736	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	92
PID 1624 wrote to memory of 3736	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	92
PID 1624 wrote to memory of 1860	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	93
PID 1624 wrote to memory of 1860	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	93
PID 1624 wrote to memory of 1860	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	93
PID 1624 wrote to memory of 4352	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	94
PID 1624 wrote to memory of 4352	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	94
PID 1624 wrote to memory of 4352	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	94
PID 1624 wrote to memory of 2124	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	95
PID 1624 wrote to memory of 2124	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	95
PID 1624 wrote to memory of 2124	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	95
PID 1624 wrote to memory of 384	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	96
PID 1624 wrote to memory of 384	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	96
PID 1624 wrote to memory of 384	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	96
PID 1624 wrote to memory of 872	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	97
PID 1624 wrote to memory of 872	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	97
PID 1624 wrote to memory of 872	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	97
PID 1624 wrote to memory of 4500	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	98
PID 1624 wrote to memory of 4500	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	98
PID 1624 wrote to memory of 4500	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	98
PID 1624 wrote to memory of 3364	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	99
PID 1624 wrote to memory of 3364	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	99
PID 1624 wrote to memory of 3364	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	99
PID 1624 wrote to memory of 1148	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	100
PID 1624 wrote to memory of 1148	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	100
PID 1624 wrote to memory of 1148	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	100
PID 1624 wrote to memory of 3480	1624	a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe	101

C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1624
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4932
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4244
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3800
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3004
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1096
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3584
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:536
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1136
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3700
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3736
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1860
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4352
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2124
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:384
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:872
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4500
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3364
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1148
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3480
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:976
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1512
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3504
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3652
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2964
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3828
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3404
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2920
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3204
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:680
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:776
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:412
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2956
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1592
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3212
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3712
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4344
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4280
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2992
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3976
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2700
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4388
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4784
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:768
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2948
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1572
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4808
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1964
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4420
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4764
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2200
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4996
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1600
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1228
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1692
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1696
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2348
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1524
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4384
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4884
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3600
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2132
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3576
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4824
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3668
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:940
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4676
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3768
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4788
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4776
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5012
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2476
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1912
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3468
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2168
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1784
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:652
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5068
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3968
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3172
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5056
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2256
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5080
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3616
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3396
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4952
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4724
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:884
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3128
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1248
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:952
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5004
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1704
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:880
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3336
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1804
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4508
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1876
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3088
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1420
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3988
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2292
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1276
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4368
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1372
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:320
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1880
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3592
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:812
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:220
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3200
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1376
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1368
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4392
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3940
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1616
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4324
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4760
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4928
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2152
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4660
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:388
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:100
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4972
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:224
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1052
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4300
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4976
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2924
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1656
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4908
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3972
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1868
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2952
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2232
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:752
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3956
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3256
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2432
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1800
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2412
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3116
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1252
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2660
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3436
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1364
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5036
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4212
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4332
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5060
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:888
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3488
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:964
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1564
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1736
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2392
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1260
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2204
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3112
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3152
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:924
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2288
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3196
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1444
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3472
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:3076
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4872
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:5008
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:4924
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:1028
- C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a349bef0ed9119089be25909b2dbcef2_JaffaCakes118.exe
  2⤵
  PID:2396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1624-0-0x0000000000730000-0x0000000000735000-memory.dmp

Download