019114995144b61e8c5efba8fcb317aa1e73a2fbd6275faf2dae8205080b67cc

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
19-05-2024 00:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
Size

296KB
MD5

579506247c2dae703d6593980e3d9ed1
SHA1

9fc38df85161d0f71ca99cb011df03bd2764d25b
SHA256

019114995144b61e8c5efba8fcb317aa1e73a2fbd6275faf2dae8205080b67cc
SHA512

e23bf952d0ab75000a725f32ef5e43c1d2f0de6dd82ba3f3bdd8606254959ddc3a6d3605b7eae807983f7314b0f05dec6c91b33a4398859b1587618075864243
SSDEEP

6144:VbprdJH5x43qQmNuLI0MfgDMkL7boLiUYoQ:Zprd23tmQLAf0Ms7borW

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2252	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	28
PID 2244 wrote to memory of 2252	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	28
PID 2244 wrote to memory of 2252	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	28
PID 2244 wrote to memory of 2252	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	28
PID 2244 wrote to memory of 2372	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2372	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2372	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2372	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2564	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	30
PID 2244 wrote to memory of 2564	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	30
PID 2244 wrote to memory of 2564	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	30
PID 2244 wrote to memory of 2564	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	30
PID 2244 wrote to memory of 2868	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	31
PID 2244 wrote to memory of 2868	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	31
PID 2244 wrote to memory of 2868	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	31
PID 2244 wrote to memory of 2868	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	31
PID 2244 wrote to memory of 848	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	32
PID 2244 wrote to memory of 848	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	32
PID 2244 wrote to memory of 848	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	32
PID 2244 wrote to memory of 848	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	32
PID 2244 wrote to memory of 1320	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	33
PID 2244 wrote to memory of 1320	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	33
PID 2244 wrote to memory of 1320	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	33
PID 2244 wrote to memory of 1320	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	33
PID 2244 wrote to memory of 2612	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	34
PID 2244 wrote to memory of 2612	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	34
PID 2244 wrote to memory of 2612	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	34
PID 2244 wrote to memory of 2612	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	34
PID 2244 wrote to memory of 2600	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	35
PID 2244 wrote to memory of 2600	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	35
PID 2244 wrote to memory of 2600	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	35
PID 2244 wrote to memory of 2600	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	35
PID 2244 wrote to memory of 2620	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	36
PID 2244 wrote to memory of 2620	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	36
PID 2244 wrote to memory of 2620	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	36
PID 2244 wrote to memory of 2620	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	36
PID 2244 wrote to memory of 2680	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	37
PID 2244 wrote to memory of 2680	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	37
PID 2244 wrote to memory of 2680	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	37
PID 2244 wrote to memory of 2680	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	37
PID 2244 wrote to memory of 2684	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	38
PID 2244 wrote to memory of 2684	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	38
PID 2244 wrote to memory of 2684	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	38
PID 2244 wrote to memory of 2684	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	38
PID 2244 wrote to memory of 2720	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	39
PID 2244 wrote to memory of 2720	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	39
PID 2244 wrote to memory of 2720	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	39
PID 2244 wrote to memory of 2720	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	39
PID 2244 wrote to memory of 2732	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	40
PID 2244 wrote to memory of 2732	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	40
PID 2244 wrote to memory of 2732	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	40
PID 2244 wrote to memory of 2732	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	40
PID 2244 wrote to memory of 2676	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	41
PID 2244 wrote to memory of 2676	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	41
PID 2244 wrote to memory of 2676	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	41
PID 2244 wrote to memory of 2676	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	41
PID 2244 wrote to memory of 2628	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	42
PID 2244 wrote to memory of 2628	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	42
PID 2244 wrote to memory of 2628	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	42
PID 2244 wrote to memory of 2628	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	42
PID 2244 wrote to memory of 2596	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	43
PID 2244 wrote to memory of 2596	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	43
PID 2244 wrote to memory of 2596	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	43
PID 2244 wrote to memory of 2596	2244	579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe	43

C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2252
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2372
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2564
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:848
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1320
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2600
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2680
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2684
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2720
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2732
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2676
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2148
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2632
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2668
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2080
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2496
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2404
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2644
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2516
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2584
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2476
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2492
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2524
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2544
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2592
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2880
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2520
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2980
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2156
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2180
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1236
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2364
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1916
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:948
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:952
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2648
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:940
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1944
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1900
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:956
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:708
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:776
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1968
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1716
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1696
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2200
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2704
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1912
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1120
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2792
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2784
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2700
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2560
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2808
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1648
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1932
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:640
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1540
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1440
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1468
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2844
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2952
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2876
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2864
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2836
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2828
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1224
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2040
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2012
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2052
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2912
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2452
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2804
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1220
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1504
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2116
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:536
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:584
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:600
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:784
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:268
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:716
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1244
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1248
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1436
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2752
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:572
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1508
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:568
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2972
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:560
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:664
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1992
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1056
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2096
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1740
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2112
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:448
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1060
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2856
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1780
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1140
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1096
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2184
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1076
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1228
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2104
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2188
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1964
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1688
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1824
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1672
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1212
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:112
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1748
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1680
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1092
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1764
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1800
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:376
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2316
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2292
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1180
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:328
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2344
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1896
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3020
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2144
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1064
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2928
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1732
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:320
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1332
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2384
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2032
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1772
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1936
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1996
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2960
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2948
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3004
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2260
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1048
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:2000
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3080
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3088
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3096
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3104
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3112
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3120
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3128
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3136
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3144
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3152
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3160
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3168
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3176
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3184
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3192
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3200
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3208
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3216
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3224
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3232
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3240
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3248
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3256
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3268
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3276
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3284
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3300
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3308
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3316
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3332
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3340
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3348
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3356
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3364
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3372
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3380
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3388
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3396
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3404
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3420
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3428
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3436
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3452
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3460
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3468
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3476
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3484
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3500
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3508
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3516
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3524
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3532
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3548
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3556
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3564
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3572
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3580
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3596
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3644
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3668
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3676
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3684
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3692
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3700
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3708
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3716
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3724
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3732
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3740
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3748
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3756
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3764
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3772
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3780
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3792
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3800
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3808
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3816
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3824
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3832
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3840
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3848
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3856
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3864
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3872
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3880
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3888
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3896
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3904
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3912
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3920
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3936
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3960
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3968
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3976
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:3992
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4000
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4008
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4016
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4024
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4032
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4040
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4048
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4056
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4064
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4072
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4088
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:1704
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4104
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4112
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4136
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4144
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4152
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4160
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4168
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4184
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4192
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4200
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4208
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4216
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4224
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4232
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4240
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4248
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4256
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4264
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4272
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4280
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4288
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4296
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4304
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4312
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4320
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4328
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4336
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4344
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4352
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4360
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4368
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4376
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4384
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4392
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4408
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4416
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4424
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4432
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4440
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4448
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4456
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4464
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4472
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4480
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4488
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4496
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4504
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4512
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4520
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4528
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4536
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4544
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4552
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4592
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4600
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4608
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4616
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4624
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4640
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4648
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4656
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4664
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4672
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4688
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4704
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4712
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4720
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4744
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4760
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4776
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4784
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4792
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4808
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4816
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4824
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4832
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4840
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4848
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4864
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4872
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4880
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4896
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4912
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4920
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4928
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4936
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4944
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4952
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4960
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4976
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4984
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:4992
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5008
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5016
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5040
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5048
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5056
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5064
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5072
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5080
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5088
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5096
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5104
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5112
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5124
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5132
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5140
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5148
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5156
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5164
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5172
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5180
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5188
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5196
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5204
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5212
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5220
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5228
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5236
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5252
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5260
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5268
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5276
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5284
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5292
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5300
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5308
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5316
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5332
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5340
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5348
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5356
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5364
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5372
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5380
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5388
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5396
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5404
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5412
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5420
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5428
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5436
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5452
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5460
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5468
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5476
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5484
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5492
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5500
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5508
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5516
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5524
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5532
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5540
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5548
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5556
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5564
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5572
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5580
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5596
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5644
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5668
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5676
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5684
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5692
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5700
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5708
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5716
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5724
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5732
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5740
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5748
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5756
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5764
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5772
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5780
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5788
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5796
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5804
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5812
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5828
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5836
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5844
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5852
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5860
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5868
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5876
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5884
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5892
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5900
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5908
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5916
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5924
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5932
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5940
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5948
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5956
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5964
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5972
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5980
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5988
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:5996
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6004
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6012
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6020
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6028
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6036
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6044
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6052
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6060
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6068
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6076
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6084
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6092
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6100
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6108
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6124
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6132
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6140
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6148
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6156
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6164
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6172
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6180
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6188
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6196
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6204
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6212
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6220
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6228
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6236
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6244
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6252
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6260
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6268
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6276
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6284
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6292
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6300
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6308
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6316
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6332
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6340
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6348
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6356
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6364
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6372
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6380
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6388
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6396
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6404
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6412
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6420
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6428
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6436
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6452
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6460
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6468
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6476
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6484
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6492
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6500
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6508
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6516
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6524
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6532
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6540
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6548
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6556
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6564
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6572
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6580
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6596
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6644
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6668
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6676
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6684
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6692
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6700
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6708
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6716
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6724
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6732
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6740
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6748
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6756
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6764
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6772
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6780
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6788
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6796
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6804
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6812
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6820
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6828
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6836
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6844
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6852
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6860
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6868
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6876
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6884
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6892
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6900
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6908
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6916
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6924
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6932
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6940
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6948
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6956
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6964
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6972
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6980
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6988
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:6996
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7004
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7012
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7020
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7028
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7036
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7044
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7052
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7060
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7068
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7076
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7084
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7092
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7100
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7108
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7116
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7124
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7132
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7140
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7148
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7156
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7164
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7172
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7180
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7188
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7196
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7204
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7212
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7220
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7228
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7236
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7244
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7252
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7260
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7268
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7276
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7284
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7292
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7300
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7308
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7316
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7332
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7340
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7348
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7356
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7364
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7372
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7380
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7388
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7396
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7404
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7412
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7420
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7428
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7436
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7452
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7460
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7468
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7476
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7484
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7492
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7500
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7508
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7516
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7524
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7532
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7540
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7548
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7556
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7564
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7572
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7580
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7596
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7644
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7668
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7676
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7684
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7692
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7700
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7708
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7716
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7724
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7732
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7740
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7748
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7756
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7764
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7772
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7780
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7788
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7796
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7804
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7812
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7820
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7828
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7836
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7844
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7852
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7860
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7868
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7876
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7884
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7892
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7900
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7908
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7916
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7924
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7932
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7940
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7948
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7956
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7964
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7972
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7980
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7988
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:7996
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8004
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8012
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8020
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8028
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8036
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8044
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8052
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8060
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8068
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8076
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8084
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8092
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8100
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8108
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8116
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8124
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8132
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8140
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8148
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8156
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8164
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8172
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8180
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8188
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8200
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8208
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8216
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8224
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8232
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8240
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8248
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8256
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8264
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8272
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8280
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8288
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8296
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8304
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8312
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8320
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8328
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8336
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8344
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8352
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8360
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8368
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8376
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8384
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8392
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8400
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8408
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8416
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8424
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8432
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8440
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8448
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8456
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8464
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8472
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8480
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8488
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8496
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8504
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8512
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8520
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8528
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8536
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8544
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8552
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8560
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8568
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8576
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8584
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8592
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8600
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8608
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8616
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8624
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8632
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8640
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8648
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8656
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8664
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8672
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8680
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8688
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8696
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8704
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8712
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8720
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8728
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8736
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8744
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8752
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8760
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8768
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8776
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8784
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8792
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8800
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8808
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8816
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8824
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8832
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8840
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8848
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8856
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8864
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8872
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8880
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8888
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8896
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8904
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8912
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8920
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8928
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8936
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8944
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8952
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8960
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8968
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8976
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8984
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:8992
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9000
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9008
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9016
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9024
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9032
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9040
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9048
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9056
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9064
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9072
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9080
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9088
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9096
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9104
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9112
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9120
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9128
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9136
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9144
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9152
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9160
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9168
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9176
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9184
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9192
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9200
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9208
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9220
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9228
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9236
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9244
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9252
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9260
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9268
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9276
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9284
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9292
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9300
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9308
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9316
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9324
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9332
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9340
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9348
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9356
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9364
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9372
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9380
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9388
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9396
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9404
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9412
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9420
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9428
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9436
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9444
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9452
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9460
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9468
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9476
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9484
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9492
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9500
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9508
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9516
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9524
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9532
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9540
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9548
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9556
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9564
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9572
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9580
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9588
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9596
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9604
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9612
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9620
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9628
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9636
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9644
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9652
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9660
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9668
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9676
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9684
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9692
- C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe"
  2⤵
  PID:9700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2244-0-0x00000000741D1000-0x00000000741D2000-memory.dmp

Filesize
4KB

Download
memory/2244-1-0x00000000741D0000-0x000000007477B000-memory.dmp

Filesize
5.7MB

Download
memory/2244-2-0x00000000741D0000-0x000000007477B000-memory.dmp

Filesize
5.7MB

Download
memory/2244-3-0x0000000000310000-0x0000000000314000-memory.dmp

Filesize
16KB

Download
memory/2244-5-0x00000000741D0000-0x000000007477B000-memory.dmp

Filesize
5.7MB

Download