e7c27e3b8d4280a0de5d3cdcf8582f3ad1595e180aec7924d0629e6b499bf742

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/04/2024, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll
Size

25KB
MD5

eb66b2d74f39a387a2d9ad0b8ca3c5a7
SHA1

1a98bee7c991a41a0b2fd1b501e7e8e268e836dd
SHA256

e7c27e3b8d4280a0de5d3cdcf8582f3ad1595e180aec7924d0629e6b499bf742
SHA512

a0fc2d5614bb4bccfb04dced6e15652caecffeb60eb4ffea6adfe5372d389f7c95bdba9dd6fc3a1e050be6a2b4b8f114abcb0d168ed8b1acd5fbdafc4c9e496e
SSDEEP

384:yRGPUWyJBvNNxIh3GTaJJ9GYbEIDH6fxuuMYQA8TZC38UvTsbi63V83:L+BvO22t/eJff0gMCTkDlY

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3576 wrote to memory of 4672	3576	rundll32.exe	84
PID 3576 wrote to memory of 4672	3576	rundll32.exe	84
PID 3576 wrote to memory of 4672	3576	rundll32.exe	84
PID 4672 wrote to memory of 4224	4672	rundll32.exe	85
PID 4672 wrote to memory of 4224	4672	rundll32.exe	85
PID 4672 wrote to memory of 4224	4672	rundll32.exe	85
PID 4224 wrote to memory of 2788	4224	rundll32.exe	86
PID 4224 wrote to memory of 2788	4224	rundll32.exe	86
PID 4224 wrote to memory of 2788	4224	rundll32.exe	86
PID 2788 wrote to memory of 3212	2788	rundll32.exe	87
PID 2788 wrote to memory of 3212	2788	rundll32.exe	87
PID 2788 wrote to memory of 3212	2788	rundll32.exe	87
PID 3212 wrote to memory of 1992	3212	rundll32.exe	88
PID 3212 wrote to memory of 1992	3212	rundll32.exe	88
PID 3212 wrote to memory of 1992	3212	rundll32.exe	88
PID 1992 wrote to memory of 3500	1992	rundll32.exe	89
PID 1992 wrote to memory of 3500	1992	rundll32.exe	89
PID 1992 wrote to memory of 3500	1992	rundll32.exe	89
PID 3500 wrote to memory of 4528	3500	rundll32.exe	90
PID 3500 wrote to memory of 4528	3500	rundll32.exe	90
PID 3500 wrote to memory of 4528	3500	rundll32.exe	90
PID 4528 wrote to memory of 3052	4528	rundll32.exe	91
PID 4528 wrote to memory of 3052	4528	rundll32.exe	91
PID 4528 wrote to memory of 3052	4528	rundll32.exe	91
PID 3052 wrote to memory of 4324	3052	rundll32.exe	92
PID 3052 wrote to memory of 4324	3052	rundll32.exe	92
PID 3052 wrote to memory of 4324	3052	rundll32.exe	92
PID 4324 wrote to memory of 4296	4324	rundll32.exe	93
PID 4324 wrote to memory of 4296	4324	rundll32.exe	93
PID 4324 wrote to memory of 4296	4324	rundll32.exe	93
PID 4296 wrote to memory of 1356	4296	rundll32.exe	94
PID 4296 wrote to memory of 1356	4296	rundll32.exe	94
PID 4296 wrote to memory of 1356	4296	rundll32.exe	94
PID 1356 wrote to memory of 3224	1356	rundll32.exe	95
PID 1356 wrote to memory of 3224	1356	rundll32.exe	95
PID 1356 wrote to memory of 3224	1356	rundll32.exe	95
PID 3224 wrote to memory of 1752	3224	rundll32.exe	96
PID 3224 wrote to memory of 1752	3224	rundll32.exe	96
PID 3224 wrote to memory of 1752	3224	rundll32.exe	96
PID 1752 wrote to memory of 4816	1752	rundll32.exe	97
PID 1752 wrote to memory of 4816	1752	rundll32.exe	97
PID 1752 wrote to memory of 4816	1752	rundll32.exe	97
PID 4816 wrote to memory of 3612	4816	rundll32.exe	98
PID 4816 wrote to memory of 3612	4816	rundll32.exe	98
PID 4816 wrote to memory of 3612	4816	rundll32.exe	98
PID 3612 wrote to memory of 2704	3612	rundll32.exe	99
PID 3612 wrote to memory of 2704	3612	rundll32.exe	99
PID 3612 wrote to memory of 2704	3612	rundll32.exe	99
PID 2704 wrote to memory of 4020	2704	rundll32.exe	100
PID 2704 wrote to memory of 4020	2704	rundll32.exe	100
PID 2704 wrote to memory of 4020	2704	rundll32.exe	100
PID 4020 wrote to memory of 5020	4020	rundll32.exe	101
PID 4020 wrote to memory of 5020	4020	rundll32.exe	101
PID 4020 wrote to memory of 5020	4020	rundll32.exe	101
PID 5020 wrote to memory of 4044	5020	rundll32.exe	102
PID 5020 wrote to memory of 4044	5020	rundll32.exe	102
PID 5020 wrote to memory of 4044	5020	rundll32.exe	102
PID 4044 wrote to memory of 3780	4044	rundll32.exe	103
PID 4044 wrote to memory of 3780	4044	rundll32.exe	103
PID 4044 wrote to memory of 3780	4044	rundll32.exe	103
PID 3780 wrote to memory of 4368	3780	rundll32.exe	104
PID 3780 wrote to memory of 4368	3780	rundll32.exe	104
PID 3780 wrote to memory of 4368	3780	rundll32.exe	104
PID 4368 wrote to memory of 4448	4368	rundll32.exe	105

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3576
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4672
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4224
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2788
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3212
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:1992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:3052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:1356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:1752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:4816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:3780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        23⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        24⤵
        
        PID:224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        25⤵
        
        PID:3532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        26⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        27⤵
        
        PID:1600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        28⤵
        
        PID:2496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        29⤵
        
        PID:2320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        30⤵
        
        PID:3684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        31⤵
        
        PID:2864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        32⤵
        
        PID:3940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        33⤵
        
        PID:1820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        34⤵
        
        PID:4252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        35⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        36⤵
        
        PID:3928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        37⤵
        
        PID:2024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        38⤵
        
        PID:244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        39⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        40⤵
        
        PID:840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        41⤵
        
        PID:2228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        42⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        43⤵
        
        PID:3536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        44⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        45⤵
        
        PID:1880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        46⤵
        
        PID:3044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        47⤵
        
        PID:3492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        48⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        49⤵
        
        PID:4732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        50⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        51⤵
        
        PID:4128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        52⤵
        
        PID:848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        53⤵
        
        PID:1940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        54⤵
        
        PID:4964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        55⤵
        
        PID:1520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        56⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        57⤵
        
        PID:3552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        58⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        59⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        60⤵
        
        PID:1324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        61⤵
        
        PID:2764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        62⤵
        
        PID:1072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        63⤵
        
        PID:3444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        64⤵
        
        PID:3584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        65⤵
        
        PID:3648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        66⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        67⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        68⤵
        
        PID:3368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        69⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        70⤵
        
        PID:3080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        71⤵
        
        PID:2376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        72⤵
        
        PID:2736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        73⤵
        
        PID:2624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        74⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        75⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        76⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        77⤵
        
        PID:5008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        78⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        79⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        80⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        81⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        82⤵
        
        PID:4568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        83⤵
        
        PID:3308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        84⤵
        
        PID:680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        85⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        86⤵
        
        PID:2164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        87⤵
        
        PID:220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        88⤵
        
        PID:2636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        89⤵
        
        PID:1656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        90⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        91⤵
        
        PID:4852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        92⤵
        
        PID:2336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        93⤵
        
        PID:3008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        94⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        95⤵
        
        PID:2804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        96⤵
        
        PID:1604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        97⤵
        
        PID:4928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        98⤵
        
        PID:2640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        99⤵
        
        PID:2840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        100⤵
        
        PID:4536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        101⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        102⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        103⤵
        
        PID:4556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        104⤵
        
        PID:2352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        105⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        106⤵
        
        PID:3560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        107⤵
        
        PID:4932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        108⤵
        
        PID:3100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        109⤵
        
        PID:4944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        110⤵
        
        PID:532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        111⤵
        
        PID:2168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        112⤵
        
        PID:556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        113⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        114⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        115⤵
        
        PID:4312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        116⤵
        
        PID:2108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        117⤵
        
        PID:368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        118⤵
        
        PID:3820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        119⤵
        
        PID:740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        120⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        121⤵
        
        PID:5144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        122⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        123⤵
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        124⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        125⤵
        
        PID:5204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        126⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        127⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        128⤵
        
        PID:5252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        129⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        130⤵
        
        PID:5284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        131⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        132⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        133⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        134⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        135⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        136⤵
        
        PID:5384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        137⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        138⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        139⤵
        
        PID:5428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        140⤵
        
        PID:5444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        141⤵
        
        PID:5460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        142⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        143⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        144⤵
        
        PID:5504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        145⤵
        
        PID:5520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        146⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        147⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        148⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        149⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        150⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        151⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        152⤵
        
        PID:5628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        153⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        154⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        155⤵
        
        PID:5668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        156⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        157⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        158⤵
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        159⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        160⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        161⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        162⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        163⤵
        
        PID:5784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        164⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        165⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        166⤵
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        167⤵
        
        PID:5848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        168⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        169⤵
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        170⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        171⤵
        
        PID:5900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        172⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        173⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        174⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        175⤵
        
        PID:5968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        176⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        177⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        178⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        179⤵
        
        PID:6028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        180⤵
        
        PID:6040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        181⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        182⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        183⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        184⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        185⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        186⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        187⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        188⤵
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        189⤵
        
        PID:6168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        190⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        191⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        192⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        193⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        194⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        195⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        196⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        197⤵
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        198⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        199⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        200⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        201⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        202⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        203⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        204⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        205⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        206⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        207⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        208⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        209⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        210⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        211⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        212⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        213⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        214⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        215⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        216⤵
        
        PID:6576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        217⤵
        
        PID:6592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        218⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        219⤵
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        220⤵
        
        PID:6640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        221⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        222⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        223⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        224⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        225⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        226⤵
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        227⤵
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        228⤵
        
        PID:6764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        229⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        230⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        231⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        232⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        233⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        234⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        235⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        236⤵
        
        PID:6880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        237⤵
        
        PID:6892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        238⤵
        
        PID:6904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        239⤵
        
        PID:6924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        240⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        241⤵
        
        PID:6952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        242⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        243⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        244⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        245⤵
        
        PID:7012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        246⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        247⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        248⤵
        
        PID:7060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        249⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        250⤵
        
        PID:7096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        251⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        252⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        253⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        254⤵
        
        PID:7156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        255⤵
        
        PID:7172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        256⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        257⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        258⤵
        
        PID:7220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        259⤵
        
        PID:7236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        260⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        261⤵
        
        PID:7264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        262⤵
        
        PID:7276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        263⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        264⤵
        
        PID:7308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        265⤵
        
        PID:7320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        266⤵
        
        PID:7336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        267⤵
        
        PID:7352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        268⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        269⤵
        
        PID:7384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        270⤵
        
        PID:7400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        271⤵
        
        PID:7416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        272⤵
        
        PID:7432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        273⤵
        
        PID:7448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        274⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        275⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        276⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        277⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        278⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        279⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        280⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        281⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        282⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        283⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        284⤵
        
        PID:7624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        285⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        286⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        287⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        288⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        289⤵
        
        PID:7700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        290⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        291⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        292⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        293⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        294⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        295⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        296⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        297⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        298⤵
        
        PID:7844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        299⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        300⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        301⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        302⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        303⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        304⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        305⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        306⤵
        
        PID:7968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        307⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        308⤵
        
        PID:7996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        309⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        310⤵
        
        PID:8024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        311⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        312⤵
        
        PID:8052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        313⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        314⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        315⤵
        
        PID:8100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        316⤵
        
        PID:8120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        317⤵
        
        PID:8132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        318⤵
        
        PID:8148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        319⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        320⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        321⤵
        
        PID:8
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        322⤵
        
        PID:8200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        323⤵
        
        PID:8216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        324⤵
        
        PID:8232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        325⤵
        
        PID:8244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        326⤵
        
        PID:8260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        327⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        328⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        329⤵
        
        PID:8308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        330⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        331⤵
        
        PID:8336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        332⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        333⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        334⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        335⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        336⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        337⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        338⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        339⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        340⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        341⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        342⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        343⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        344⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        345⤵
        
        PID:8552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        346⤵
        
        PID:8568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        347⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        348⤵
        
        PID:8596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        349⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        350⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        351⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        352⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        353⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        354⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        355⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        356⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        357⤵
        
        PID:8724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        358⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        359⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        360⤵
        
        PID:8772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        361⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        362⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        363⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        364⤵
        
        PID:8820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        365⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        366⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        367⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        368⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        369⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        370⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        371⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        372⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        373⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        374⤵
        
        PID:8976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        375⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        376⤵
        
        PID:9008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        377⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        378⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        379⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        380⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        381⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        382⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        383⤵
        
        PID:9112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        384⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        385⤵
        
        PID:9136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        386⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        387⤵
        
        PID:9168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        388⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        389⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        390⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        391⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        392⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        393⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        394⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        395⤵
        
        PID:9284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        396⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        397⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        398⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        399⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        400⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        401⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        402⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        403⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        404⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        405⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        406⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        407⤵
        
        PID:9468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        408⤵
        
        PID:9484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        409⤵
        
        PID:9500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        410⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        411⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        412⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        413⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        414⤵
        
        PID:9576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        415⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        416⤵
        
        PID:9604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        417⤵
        
        PID:9620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        418⤵
        
        PID:9636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        419⤵
        
        PID:9652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        420⤵
        
        PID:9664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        421⤵
        
        PID:9680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        422⤵
        
        PID:9696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        423⤵
        
        PID:9708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        424⤵
        
        PID:9724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        425⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        426⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        427⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        428⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        429⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        430⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        431⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        432⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        433⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        434⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        435⤵
        
        PID:9896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        436⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        437⤵
        
        PID:9928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        438⤵
        
        PID:9944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        439⤵
        
        PID:9960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        440⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        441⤵
        
        PID:9988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        442⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        443⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        444⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        445⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        446⤵
        
        PID:10060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        447⤵
        
        PID:10076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        448⤵
        
        PID:10092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        449⤵
        
        PID:10104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        450⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        451⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        452⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        453⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        454⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        455⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        456⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        457⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        458⤵
        
        PID:8928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        459⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        460⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        461⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        462⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        463⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        464⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        465⤵
        
        PID:10348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        466⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        467⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        468⤵
        
        PID:10396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        469⤵
        
        PID:10412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        470⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        471⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        472⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        473⤵
        
        PID:10476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        474⤵
        
        PID:10492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        475⤵
        
        PID:10508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        476⤵
        
        PID:10524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        477⤵
        
        PID:10540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        478⤵
        
        PID:10556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        479⤵
        
        PID:10572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        480⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        481⤵
        
        PID:10608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        482⤵
        
        PID:10620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        483⤵
        
        PID:10636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        484⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        485⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        486⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        487⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        488⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        489⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        490⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        491⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        492⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        493⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        494⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        495⤵
        
        PID:10824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        496⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        497⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        498⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        499⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        500⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        501⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        502⤵
        
        PID:10932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        503⤵
        
        PID:10948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        504⤵
        
        PID:10964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        505⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        506⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        507⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        508⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        509⤵
        
        PID:11040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        510⤵
        
        PID:11056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        511⤵
        
        PID:11072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        512⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        513⤵
        
        PID:11100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        514⤵
        
        PID:11116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        515⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        516⤵
        
        PID:11144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        517⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        518⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        519⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        520⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        521⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        522⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        523⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        524⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        525⤵
        
        PID:11280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        526⤵
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        527⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        528⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        529⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        530⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        531⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        532⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        533⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        534⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        535⤵
        
        PID:11436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        536⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        537⤵
        
        PID:11468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        538⤵
        
        PID:11484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        539⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        540⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        541⤵
        
        PID:11528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        542⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        543⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        544⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        545⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        546⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        547⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        548⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        549⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        550⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        551⤵
        
        PID:11680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        552⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        553⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        554⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        555⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        556⤵
        
        PID:11752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        557⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        558⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        559⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        560⤵
        
        PID:11808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        561⤵
        
        PID:11824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        562⤵
        
        PID:11840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        563⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        564⤵
        
        PID:11872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        565⤵
        
        PID:11884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        566⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        567⤵
        
        PID:11916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        568⤵
        
        PID:11928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        569⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        570⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        571⤵
        
        PID:11972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        572⤵
        
        PID:11988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        573⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        574⤵
        
        PID:12012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        575⤵
        
        PID:12028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        576⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        577⤵
        
        PID:12060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        578⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        579⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        580⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        581⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        582⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        583⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        584⤵
        
        PID:12176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        585⤵
        
        PID:12188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        586⤵
        
        PID:12204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        587⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        588⤵
        
        PID:12236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        589⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        590⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        591⤵
        
        PID:12280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        592⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        593⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        594⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        595⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        596⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        597⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        598⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        599⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        600⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        601⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        602⤵
        
        PID:12448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        603⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        604⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        605⤵
        
        PID:12496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        606⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        607⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        608⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        609⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        610⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        611⤵
        
        PID:12584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        612⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        613⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        614⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        615⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        616⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        617⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        618⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        619⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        620⤵
        
        PID:12712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        621⤵
        
        PID:12728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        622⤵
        
        PID:12744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        623⤵
        
        PID:12760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        624⤵
        
        PID:12776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        625⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        626⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        627⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        628⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        629⤵
        
        PID:12852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        630⤵
        
        PID:12868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        631⤵
        
        PID:12884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        632⤵
        
        PID:12900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        633⤵
        
        PID:12916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        634⤵
        
        PID:12932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        635⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        636⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        637⤵
        
        PID:12980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        638⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        639⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        640⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        641⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        642⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        643⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        644⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        645⤵
        
        PID:13100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        646⤵
        
        PID:13116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        647⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        648⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        649⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        650⤵
        
        PID:13176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        651⤵
        
        PID:13192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        652⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        653⤵
        
        PID:13220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        654⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        655⤵
        
        PID:13252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        656⤵
        
        PID:13268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        657⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        658⤵
        
        PID:13300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        659⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        660⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        661⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        662⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        663⤵
        
        PID:13376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        664⤵
        
        PID:13392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        665⤵
        
        PID:13404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        666⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        667⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        668⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        669⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        670⤵
        
        PID:13472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        671⤵
        
        PID:13488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        672⤵
        
        PID:13504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        673⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        674⤵
        
        PID:13536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        675⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        676⤵
        
        PID:13564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        677⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        678⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        679⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        680⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        681⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        682⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        683⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        684⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        685⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        686⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        687⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        688⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        689⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        690⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        691⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        692⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        693⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        694⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        695⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        696⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        697⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        698⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        699⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        700⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        701⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        702⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        703⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        704⤵
        
        PID:14000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        705⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        706⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        707⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        708⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        709⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        710⤵
        
        PID:14096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        711⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        712⤵
        
        PID:14124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        713⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        714⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        715⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        716⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        717⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        718⤵
        
        PID:14216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        719⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        720⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        721⤵
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        722⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        723⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        724⤵
        
        PID:14312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        725⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        726⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        727⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        728⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        729⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        730⤵
        
        PID:14408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        731⤵
        
        PID:14424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        732⤵
        
        PID:14440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        733⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        734⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        735⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        736⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        737⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        738⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        739⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        740⤵
        
        PID:14556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        741⤵
        
        PID:14572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        742⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        743⤵
        
        PID:14596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        744⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        745⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        746⤵
        
        PID:14648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        747⤵
        
        PID:14664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        748⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        749⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        750⤵
        
        PID:14716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        751⤵
        
        PID:14728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        752⤵
        
        PID:14744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        753⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        754⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        755⤵
        
        PID:14788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        756⤵
        
        PID:14804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        757⤵
        
        PID:14820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        758⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        759⤵
        
        PID:14852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        760⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        761⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        762⤵
        
        PID:14900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        763⤵
        
        PID:14916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        764⤵
        
        PID:14932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        765⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        766⤵
        
        PID:14960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        767⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        768⤵
        
        PID:14992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        769⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        770⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        771⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        772⤵
        
        PID:15048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        773⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        774⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        775⤵
        
        PID:15096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        776⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        777⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        778⤵
        
        PID:15136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        779⤵
        
        PID:15152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        780⤵
        
        PID:15164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        781⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        782⤵
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        783⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        784⤵
        
        PID:15224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        785⤵
        
        PID:15236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        786⤵
        
        PID:15252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        787⤵
        
        PID:15264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        788⤵
        
        PID:15280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        789⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        790⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        791⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        792⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        793⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        794⤵
        
        PID:15364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        795⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        796⤵
        
        PID:15392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        797⤵
        
        PID:15408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        798⤵
        
        PID:15424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        799⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        800⤵
        
        PID:15452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        801⤵
        
        PID:15464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        802⤵
        
        PID:15480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        803⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        804⤵
        
        PID:15520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        805⤵
        
        PID:15536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        806⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        807⤵
        
        PID:15564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        808⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        809⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        810⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        811⤵
        
        PID:15624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        812⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        813⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        814⤵
        
        PID:15668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        815⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        816⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        817⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        818⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        819⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        820⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        821⤵
        
        PID:15780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        822⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        823⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        824⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        825⤵
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        826⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        827⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        828⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        829⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        830⤵
        
        PID:15920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        831⤵
        
        PID:15936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        832⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        833⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        834⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        835⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        836⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        837⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        838⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        839⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        840⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        841⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        842⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        843⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        844⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        845⤵
        
        PID:16144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        846⤵
        
        PID:16160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        847⤵
        
        PID:16176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        848⤵
        
        PID:16192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        849⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        850⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        851⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        852⤵
        
        PID:16248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        853⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        854⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        855⤵
        
        PID:16292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        856⤵
        
        PID:16308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        857⤵
        
        PID:16324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        858⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        859⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        860⤵
        
        PID:15772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        861⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        862⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        863⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        864⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        865⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        866⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        867⤵
        
        PID:16488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        868⤵
        
        PID:16504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        869⤵
        
        PID:16516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        870⤵
        
        PID:16528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        871⤵
        
        PID:16544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        872⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        873⤵
        
        PID:16572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        874⤵
        
        PID:16588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        875⤵
        
        PID:16604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        876⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        877⤵
        
        PID:16644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        878⤵
        
        PID:16660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        879⤵
        
        PID:16676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        880⤵
        
        PID:16688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        881⤵
        
        PID:16708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        882⤵
        
        PID:16720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        883⤵
        
        PID:16748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        884⤵
        
        PID:16780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        885⤵
        
        PID:16812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb66b2d74f39a387a2d9ad0b8ca3c5a7_JaffaCakes118.dll,#1
        886⤵
        
        PID:16828

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads