ab0db55a30dfeb4f6c1fc0c06a18cfdc94622155a9abe5624e108c4c5b6bbf02

General

Target

6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll
Size

4KB
MD5

6950d52ac5be349ed494cddd9e372a03
SHA1

f926598b7283c838e630ba408fbcb6e39c4b32b5
SHA256

ab0db55a30dfeb4f6c1fc0c06a18cfdc94622155a9abe5624e108c4c5b6bbf02
SHA512

11a8448973208e12cbd8da902e5823203c23c419c524f82dcb836b234727c3ee63681c602eabf7e2df9228f5e2a8c4a0020560dc525511fb839edda322acd59a

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

rundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exe

description	pid	process	target process
PID 3208 wrote to memory of 920	3208	rundll32.exe	rundll32.exe
PID 3208 wrote to memory of 920	3208	rundll32.exe	rundll32.exe
PID 3208 wrote to memory of 920	3208	rundll32.exe	rundll32.exe
PID 920 wrote to memory of 396	920	rundll32.exe	rundll32.exe
PID 920 wrote to memory of 396	920	rundll32.exe	rundll32.exe
PID 920 wrote to memory of 396	920	rundll32.exe	rundll32.exe
PID 396 wrote to memory of 1788	396	rundll32.exe	rundll32.exe
PID 396 wrote to memory of 1788	396	rundll32.exe	rundll32.exe
PID 396 wrote to memory of 1788	396	rundll32.exe	rundll32.exe
PID 1788 wrote to memory of 4260	1788	rundll32.exe	rundll32.exe
PID 1788 wrote to memory of 4260	1788	rundll32.exe	rundll32.exe
PID 1788 wrote to memory of 4260	1788	rundll32.exe	rundll32.exe
PID 4260 wrote to memory of 3124	4260	rundll32.exe	rundll32.exe
PID 4260 wrote to memory of 3124	4260	rundll32.exe	rundll32.exe
PID 4260 wrote to memory of 3124	4260	rundll32.exe	rundll32.exe
PID 3124 wrote to memory of 2424	3124	rundll32.exe	rundll32.exe
PID 3124 wrote to memory of 2424	3124	rundll32.exe	rundll32.exe
PID 3124 wrote to memory of 2424	3124	rundll32.exe	rundll32.exe
PID 2424 wrote to memory of 4336	2424	rundll32.exe	rundll32.exe
PID 2424 wrote to memory of 4336	2424	rundll32.exe	rundll32.exe
PID 2424 wrote to memory of 4336	2424	rundll32.exe	rundll32.exe
PID 4336 wrote to memory of 448	4336	rundll32.exe	rundll32.exe
PID 4336 wrote to memory of 448	4336	rundll32.exe	rundll32.exe
PID 4336 wrote to memory of 448	4336	rundll32.exe	rundll32.exe
PID 448 wrote to memory of 4416	448	rundll32.exe	rundll32.exe
PID 448 wrote to memory of 4416	448	rundll32.exe	rundll32.exe
PID 448 wrote to memory of 4416	448	rundll32.exe	rundll32.exe
PID 4416 wrote to memory of 5012	4416	rundll32.exe	rundll32.exe
PID 4416 wrote to memory of 5012	4416	rundll32.exe	rundll32.exe
PID 4416 wrote to memory of 5012	4416	rundll32.exe	rundll32.exe
PID 5012 wrote to memory of 2112	5012	rundll32.exe	rundll32.exe
PID 5012 wrote to memory of 2112	5012	rundll32.exe	rundll32.exe
PID 5012 wrote to memory of 2112	5012	rundll32.exe	rundll32.exe
PID 2112 wrote to memory of 2488	2112	rundll32.exe	rundll32.exe
PID 2112 wrote to memory of 2488	2112	rundll32.exe	rundll32.exe
PID 2112 wrote to memory of 2488	2112	rundll32.exe	rundll32.exe
PID 2488 wrote to memory of 2824	2488	rundll32.exe	rundll32.exe
PID 2488 wrote to memory of 2824	2488	rundll32.exe	rundll32.exe
PID 2488 wrote to memory of 2824	2488	rundll32.exe	rundll32.exe
PID 2824 wrote to memory of 3448	2824	rundll32.exe	rundll32.exe
PID 2824 wrote to memory of 3448	2824	rundll32.exe	rundll32.exe
PID 2824 wrote to memory of 3448	2824	rundll32.exe	rundll32.exe
PID 3448 wrote to memory of 1920	3448	rundll32.exe	rundll32.exe
PID 3448 wrote to memory of 1920	3448	rundll32.exe	rundll32.exe
PID 3448 wrote to memory of 1920	3448	rundll32.exe	rundll32.exe
PID 1920 wrote to memory of 3700	1920	rundll32.exe	rundll32.exe
PID 1920 wrote to memory of 3700	1920	rundll32.exe	rundll32.exe
PID 1920 wrote to memory of 3700	1920	rundll32.exe	rundll32.exe
PID 3700 wrote to memory of 4016	3700	rundll32.exe	rundll32.exe
PID 3700 wrote to memory of 4016	3700	rundll32.exe	rundll32.exe
PID 3700 wrote to memory of 4016	3700	rundll32.exe	rundll32.exe
PID 4016 wrote to memory of 400	4016	rundll32.exe	rundll32.exe
PID 4016 wrote to memory of 400	4016	rundll32.exe	rundll32.exe
PID 4016 wrote to memory of 400	4016	rundll32.exe	rundll32.exe
PID 400 wrote to memory of 2060	400	rundll32.exe	rundll32.exe
PID 400 wrote to memory of 2060	400	rundll32.exe	rundll32.exe
PID 400 wrote to memory of 2060	400	rundll32.exe	rundll32.exe
PID 2060 wrote to memory of 2552	2060	rundll32.exe	rundll32.exe
PID 2060 wrote to memory of 2552	2060	rundll32.exe	rundll32.exe
PID 2060 wrote to memory of 2552	2060	rundll32.exe	rundll32.exe
PID 2552 wrote to memory of 4556	2552	rundll32.exe	rundll32.exe
PID 2552 wrote to memory of 4556	2552	rundll32.exe	rundll32.exe
PID 2552 wrote to memory of 4556	2552	rundll32.exe	rundll32.exe
PID 4556 wrote to memory of 4628	4556	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
2⤵
- Suspicious use of WriteProcessMemory
PID:920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
3⤵
- Suspicious use of WriteProcessMemory
PID:396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
4⤵
- Suspicious use of WriteProcessMemory
PID:1788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
5⤵
- Suspicious use of WriteProcessMemory
PID:4260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
6⤵
- Suspicious use of WriteProcessMemory
PID:3124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
7⤵
- Suspicious use of WriteProcessMemory
PID:2424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
8⤵
- Suspicious use of WriteProcessMemory
PID:4336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
9⤵
- Suspicious use of WriteProcessMemory
PID:448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
10⤵
- Suspicious use of WriteProcessMemory
PID:4416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
11⤵
- Suspicious use of WriteProcessMemory
PID:5012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
12⤵
- Suspicious use of WriteProcessMemory
PID:2112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
13⤵
- Suspicious use of WriteProcessMemory
PID:2488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
14⤵
- Suspicious use of WriteProcessMemory
PID:2824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
15⤵
- Suspicious use of WriteProcessMemory
PID:3448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
16⤵
- Suspicious use of WriteProcessMemory
PID:1920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
17⤵
- Suspicious use of WriteProcessMemory
PID:3700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
18⤵
- Suspicious use of WriteProcessMemory
PID:4016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
19⤵
- Suspicious use of WriteProcessMemory
PID:400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
20⤵
- Suspicious use of WriteProcessMemory
PID:2060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
21⤵
- Suspicious use of WriteProcessMemory
PID:2552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
22⤵
- Suspicious use of WriteProcessMemory
PID:4556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
23⤵
PID:4628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
24⤵
PID:2680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
25⤵
PID:3056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
26⤵
PID:3924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
27⤵
PID:5044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
28⤵
PID:32

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
29⤵
PID:4896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
30⤵
PID:464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
31⤵
PID:3104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
32⤵
PID:4008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
33⤵
PID:1928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
34⤵
PID:1608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
35⤵
PID:3088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
36⤵
PID:4100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
37⤵
PID:1472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
38⤵
PID:4264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
39⤵
PID:1040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
40⤵
PID:4280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
41⤵
PID:412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
42⤵
PID:1284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
43⤵
PID:3380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
44⤵
PID:1680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
45⤵
PID:4084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
46⤵
PID:2716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
47⤵
PID:5104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
48⤵
PID:5020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
49⤵
PID:1364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
50⤵
PID:1032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
51⤵
PID:2940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
52⤵
PID:728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
53⤵
PID:1500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
54⤵
PID:4092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
55⤵
PID:380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
56⤵
PID:4548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
57⤵
PID:3012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
58⤵
PID:2284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
59⤵
PID:1512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
60⤵
PID:4064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
61⤵
PID:4740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
62⤵
PID:2304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
63⤵
PID:5064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
64⤵
PID:1060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
65⤵
PID:3944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
66⤵
PID:2384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
67⤵
PID:4776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
68⤵
PID:3816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
69⤵
PID:4528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
70⤵
PID:3652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
71⤵
PID:3236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
72⤵
PID:4252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
73⤵
PID:428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
74⤵
PID:4048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
75⤵
PID:1572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
76⤵
PID:2756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
77⤵
PID:4396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
78⤵
PID:4648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
79⤵
PID:1568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
80⤵
PID:2164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
81⤵
PID:1824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
82⤵
PID:3608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
83⤵
PID:4540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
84⤵
PID:612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
85⤵
PID:4116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
86⤵
PID:2988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
87⤵
PID:4168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
88⤵
PID:2876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
89⤵
PID:4964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
90⤵
PID:2356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
91⤵
PID:2632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
92⤵
PID:1820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
93⤵
PID:4044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
94⤵
PID:4384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
95⤵
PID:4668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
96⤵
PID:4748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
97⤵
PID:116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
98⤵
PID:2196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
99⤵
PID:1900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
100⤵
PID:1708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
101⤵
PID:2236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
102⤵
PID:5128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
103⤵
PID:5144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
104⤵
PID:5160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
105⤵
PID:5176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
106⤵
PID:5192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
107⤵
PID:5208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
108⤵
PID:5224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
109⤵
PID:5244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
110⤵
PID:5260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
111⤵
PID:5276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
112⤵
PID:5292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
113⤵
PID:5304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
114⤵
PID:5320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
115⤵
PID:5332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
116⤵
PID:5348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
117⤵
PID:5360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
118⤵
PID:5384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
119⤵
PID:5408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
120⤵
PID:5420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
121⤵
PID:5440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
122⤵
PID:5456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
123⤵
PID:5472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
124⤵
PID:5488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
125⤵
PID:5516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
126⤵
PID:5536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
127⤵
PID:5548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
128⤵
PID:5560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
129⤵
PID:5572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
130⤵
PID:5588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
131⤵
PID:5608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
132⤵
PID:5628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
133⤵
PID:5652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
134⤵
PID:5668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
135⤵
PID:5684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
136⤵
PID:5700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
137⤵
PID:5724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
138⤵
PID:5744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
139⤵
PID:5760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
140⤵
PID:5776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
141⤵
PID:5792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
142⤵
PID:5804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
143⤵
PID:5824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
144⤵
PID:5844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
145⤵
PID:5864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
146⤵
PID:5880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
147⤵
PID:5892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
148⤵
PID:5908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
149⤵
PID:5924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
150⤵
PID:5940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
151⤵
PID:5956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
152⤵
PID:5972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
153⤵
PID:5992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
154⤵
PID:6008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
155⤵
PID:6024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
156⤵
PID:6040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
157⤵
PID:6068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
158⤵
PID:6088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
159⤵
PID:6104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
160⤵
PID:6120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
161⤵
PID:6140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
162⤵
PID:2976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
163⤵
PID:6160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
164⤵
PID:6176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
165⤵
PID:6192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
166⤵
PID:6208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
167⤵
PID:6224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
168⤵
PID:6240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
169⤵
PID:6260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
170⤵
PID:6276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
171⤵
PID:6292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
172⤵
PID:6308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
173⤵
PID:6336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
174⤵
PID:6360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
175⤵
PID:6376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
176⤵
PID:6388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
177⤵
PID:6400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
178⤵
PID:6416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
179⤵
PID:6432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
180⤵
PID:6444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
181⤵
PID:6460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
182⤵
PID:6476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
183⤵
PID:6496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
184⤵
PID:6512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
185⤵
PID:6528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
186⤵
PID:6544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
187⤵
PID:6560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
188⤵
PID:6572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
189⤵
PID:6596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
190⤵
PID:6612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
191⤵
PID:6628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
192⤵
PID:6644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
193⤵
PID:6660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
194⤵
PID:6676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
195⤵
PID:6692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
196⤵
PID:6704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
197⤵
PID:6720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
198⤵
PID:6732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
199⤵
PID:6748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
200⤵
PID:6768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
201⤵
PID:6784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
202⤵
PID:6796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
203⤵
PID:6820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
204⤵
PID:6832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
205⤵
PID:6852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
206⤵
PID:6868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
207⤵
PID:6908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
208⤵
PID:6940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
209⤵
PID:6956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
210⤵
PID:6972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
211⤵
PID:6984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
212⤵
PID:7000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
213⤵
PID:7016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
214⤵
PID:7032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
215⤵
PID:7048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
216⤵
PID:7060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
217⤵
PID:7080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
218⤵
PID:7096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
219⤵
PID:7112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
220⤵
PID:7128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
221⤵
PID:7140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
222⤵
PID:7152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
223⤵
PID:7164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
224⤵
PID:6584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
225⤵
PID:7184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
226⤵
PID:7204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
227⤵
PID:7220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
228⤵
PID:7236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
229⤵
PID:7252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
230⤵
PID:7268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
231⤵
PID:7284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
232⤵
PID:7300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
233⤵
PID:7316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
234⤵
PID:7332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
235⤵
PID:7344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
236⤵
PID:7356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
237⤵
PID:7376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
238⤵
PID:7392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
239⤵
PID:7416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
240⤵
PID:7436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
241⤵
PID:7452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
242⤵
PID:7496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
243⤵
PID:7528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
244⤵
PID:7560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
245⤵
PID:7576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
246⤵
PID:7592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
247⤵
PID:7644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
248⤵
PID:7672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
249⤵
PID:7716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
250⤵
PID:7736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
251⤵
PID:7752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
252⤵
PID:7768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
253⤵
PID:7788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
254⤵
PID:7804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
255⤵
PID:7828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
256⤵
PID:7852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
257⤵
PID:7868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
258⤵
PID:7884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
259⤵
PID:7896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
260⤵
PID:7912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
261⤵
PID:7928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
262⤵
PID:7944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
263⤵
PID:7964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
264⤵
PID:7980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
265⤵
PID:7996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
266⤵
PID:8008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
267⤵
PID:8024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
268⤵
PID:8036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
269⤵
PID:8052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
270⤵
PID:8068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
271⤵
PID:8080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
272⤵
PID:8096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
273⤵
PID:8108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
274⤵
PID:8120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
275⤵
PID:8148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
276⤵
PID:8164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
277⤵
PID:8180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
278⤵
PID:7180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
279⤵
PID:8204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
280⤵
PID:8220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
281⤵
PID:8236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
282⤵
PID:8252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
283⤵
PID:8268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
284⤵
PID:8284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
285⤵
PID:8296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
286⤵
PID:8312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
287⤵
PID:8328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
288⤵
PID:8340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
289⤵
PID:8360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
290⤵
PID:8376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
291⤵
PID:8392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
292⤵
PID:8408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
293⤵
PID:8420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
294⤵
PID:8436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
295⤵
PID:8452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
296⤵
PID:8468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
297⤵
PID:8480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
298⤵
PID:8500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
299⤵
PID:8516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
300⤵
PID:8532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
301⤵
PID:8548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
302⤵
PID:8564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
303⤵
PID:8580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
304⤵
PID:8596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
305⤵
PID:8612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
306⤵
PID:8628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
307⤵
PID:8644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
308⤵
PID:8664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
309⤵
PID:8680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
310⤵
PID:8696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
311⤵
PID:8712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
312⤵
PID:8724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
313⤵
PID:8736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
314⤵
PID:8752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
315⤵
PID:8764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
316⤵
PID:8780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
317⤵
PID:8792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
318⤵
PID:8804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
319⤵
PID:8824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
320⤵
PID:8836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
321⤵
PID:8852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
322⤵
PID:8868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
323⤵
PID:8880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
324⤵
PID:8900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
325⤵
PID:8916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
326⤵
PID:8928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
327⤵
PID:8948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
328⤵
PID:8960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
329⤵
PID:8980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
330⤵
PID:9008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
331⤵
PID:9044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
332⤵
PID:9068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
333⤵
PID:9096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
334⤵
PID:9112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
335⤵
PID:9124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
336⤵
PID:9144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
337⤵
PID:9160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
338⤵
PID:9172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
339⤵
PID:9196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
340⤵
PID:9056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
341⤵
PID:9232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
342⤵
PID:9248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
343⤵
PID:9268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
344⤵
PID:9284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
345⤵
PID:9308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
346⤵
PID:9332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
347⤵
PID:9352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
348⤵
PID:9368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
349⤵
PID:9384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
350⤵
PID:9396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
351⤵
PID:9412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
352⤵
PID:9424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
353⤵
PID:9440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
354⤵
PID:9456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
355⤵
PID:9472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
356⤵
PID:9488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
357⤵
PID:9504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
358⤵
PID:9520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
359⤵
PID:9532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
360⤵
PID:9548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
361⤵
PID:9560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
362⤵
PID:9576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
363⤵
PID:9592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
364⤵
PID:9604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
365⤵
PID:9616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
366⤵
PID:9636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
367⤵
PID:9652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
368⤵
PID:9668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
369⤵
PID:9684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
370⤵
PID:9696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
371⤵
PID:9712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
372⤵
PID:9724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
373⤵
PID:9740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
374⤵
PID:9756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
375⤵
PID:9772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
376⤵
PID:9788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
377⤵
PID:9804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
378⤵
PID:9816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
379⤵
PID:9836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
380⤵
PID:9852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
381⤵
PID:9864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
382⤵
PID:9888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
383⤵
PID:9904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
384⤵
PID:9920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
385⤵
PID:9932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
386⤵
PID:9948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
387⤵
PID:9964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
388⤵
PID:9980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
389⤵
PID:9996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
390⤵
PID:10012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
391⤵
PID:10024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
392⤵
PID:10036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
393⤵
PID:10052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
394⤵
PID:10064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
395⤵
PID:10080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
396⤵
PID:10092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
397⤵
PID:10116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
398⤵
PID:10132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
399⤵
PID:10144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
400⤵
PID:10156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
401⤵
PID:10172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
402⤵
PID:10188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
403⤵
PID:10204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
404⤵
PID:10220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
405⤵
PID:10236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
406⤵
PID:1668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
407⤵
PID:3108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
408⤵
PID:3748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
409⤵
PID:4152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
410⤵
PID:4172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
411⤵
PID:1172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
412⤵
PID:468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
413⤵
PID:9624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
414⤵
PID:10252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
415⤵
PID:10272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
416⤵
PID:10288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
417⤵
PID:10308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
418⤵
PID:10320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
419⤵
PID:10340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
420⤵
PID:10356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
421⤵
PID:10376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
422⤵
PID:10412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
423⤵
PID:10432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
424⤵
PID:10452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
425⤵
PID:10480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
426⤵
PID:10492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
427⤵
PID:10524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
428⤵
PID:10556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
429⤵
PID:10588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
430⤵
PID:10604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
431⤵
PID:10620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
432⤵
PID:10636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
433⤵
PID:10656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
434⤵
PID:10676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
435⤵
PID:10692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
436⤵
PID:10716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
437⤵
PID:10752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
438⤵
PID:10772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
439⤵
PID:10784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
440⤵
PID:10808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
441⤵
PID:10824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
442⤵
PID:10844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
443⤵
PID:10860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
444⤵
PID:10876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
445⤵
PID:10892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
446⤵
PID:10912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
447⤵
PID:10932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
448⤵
PID:10960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
449⤵
PID:11008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
450⤵
PID:11036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
451⤵
PID:11056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
452⤵
PID:11104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
453⤵
PID:11132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
454⤵
PID:11148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
455⤵
PID:11168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
456⤵
PID:11192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
457⤵
PID:11208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
458⤵
PID:11228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
459⤵
PID:11244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
460⤵
PID:11260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
461⤵
PID:9032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
462⤵
PID:9080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
463⤵
PID:10180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
464⤵
PID:9040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
465⤵
PID:10516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
466⤵
PID:10576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
467⤵
PID:10732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
468⤵
PID:10744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
469⤵
PID:10700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
470⤵
PID:11276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
471⤵
PID:11296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
472⤵
PID:11316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
473⤵
PID:11328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
474⤵
PID:11340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
475⤵
PID:11364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
476⤵
PID:11376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
477⤵
PID:11392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
478⤵
PID:11412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
479⤵
PID:11428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
480⤵
PID:11440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
481⤵
PID:11460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
482⤵
PID:11480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
483⤵
PID:11492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
484⤵
PID:11508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
485⤵
PID:11520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
486⤵
PID:11540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
487⤵
PID:11552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
488⤵
PID:11564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
489⤵
PID:11576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
490⤵
PID:11592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
491⤵
PID:11608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
492⤵
PID:11620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
493⤵
PID:11636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
494⤵
PID:11656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
495⤵
PID:11672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
496⤵
PID:11688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
497⤵
PID:11704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
498⤵
PID:11720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
499⤵
PID:11736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
500⤵
PID:11752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
501⤵
PID:11768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
502⤵
PID:11784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
503⤵
PID:11800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
504⤵
PID:11820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
505⤵
PID:11836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
506⤵
PID:11852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
507⤵
PID:11868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
508⤵
PID:11884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
509⤵
PID:11900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
510⤵
PID:11916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
511⤵
PID:11932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
512⤵
PID:11944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
513⤵
PID:11964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
514⤵
PID:11980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
515⤵
PID:11996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
516⤵
PID:12012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
517⤵
PID:12028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
518⤵
PID:12044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
519⤵
PID:12060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
520⤵
PID:12076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
521⤵
PID:12088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
522⤵
PID:12108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
523⤵
PID:12124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
524⤵
PID:12136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
525⤵
PID:12152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
526⤵
PID:12168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
527⤵
PID:12184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
528⤵
PID:12196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
529⤵
PID:12212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
530⤵
PID:12228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
531⤵
PID:12244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
532⤵
PID:12260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
533⤵
PID:12276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
534⤵
PID:11352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
535⤵
PID:10424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
536⤵
PID:10628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
537⤵
PID:10664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
538⤵
PID:10568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
539⤵
PID:4792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
540⤵
PID:12296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
541⤵
PID:12312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
542⤵
PID:12324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
543⤵
PID:12336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
544⤵
PID:12352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
545⤵
PID:12368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
546⤵
PID:12380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
547⤵
PID:12408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
548⤵
PID:12428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
549⤵
PID:12444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
550⤵
PID:12460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
551⤵
PID:12476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
552⤵
PID:12492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
553⤵
PID:12508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
554⤵
PID:12528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
555⤵
PID:12544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
556⤵
PID:12560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
557⤵
PID:12576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
558⤵
PID:12592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
559⤵
PID:12608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
560⤵
PID:12624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
561⤵
PID:12640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
562⤵
PID:12656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
563⤵
PID:12672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
564⤵
PID:12688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
565⤵
PID:12700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
566⤵
PID:12720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
567⤵
PID:12736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
568⤵
PID:12752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
569⤵
PID:12768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
570⤵
PID:12784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
571⤵
PID:12800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
572⤵
PID:12816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
573⤵
PID:12832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
574⤵
PID:12848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
575⤵
PID:12864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
576⤵
PID:12880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
577⤵
PID:12896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
578⤵
PID:12912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
579⤵
PID:12924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
580⤵
PID:12940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
581⤵
PID:12956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
582⤵
PID:12972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
583⤵
PID:12988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
584⤵
PID:13004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
585⤵
PID:13020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
586⤵
PID:13036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
587⤵
PID:13048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
588⤵
PID:13064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
589⤵
PID:13076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
590⤵
PID:13088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
591⤵
PID:13104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
592⤵
PID:13120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
593⤵
PID:13136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
594⤵
PID:13152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
595⤵
PID:13172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
596⤵
PID:13188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
597⤵
PID:13204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
598⤵
PID:13216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
599⤵
PID:13228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
600⤵
PID:13244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
601⤵
PID:13260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
602⤵
PID:13276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
603⤵
PID:13292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
604⤵
PID:13304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
605⤵
PID:6932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
606⤵
PID:7408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
607⤵
PID:6924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
608⤵
PID:6892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
609⤵
PID:4944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
610⤵
PID:12524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
611⤵
PID:4864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
612⤵
PID:1672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
613⤵
PID:13316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
614⤵
PID:13332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
615⤵
PID:13344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
616⤵
PID:13364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
617⤵
PID:13380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
618⤵
PID:13396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
619⤵
PID:13408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
620⤵
PID:13424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
621⤵
PID:13440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
622⤵
PID:13456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
623⤵
PID:13472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
624⤵
PID:13488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
625⤵
PID:13504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
626⤵
PID:13520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
627⤵
PID:13532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
628⤵
PID:13548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
629⤵
PID:13564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
630⤵
PID:13580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
631⤵
PID:13596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
632⤵
PID:13612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
633⤵
PID:13632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
634⤵
PID:13644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
635⤵
PID:13660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
636⤵
PID:13676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
637⤵
PID:13692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
638⤵
PID:13708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
639⤵
PID:13724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
640⤵
PID:13740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
641⤵
PID:13756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
642⤵
PID:13772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
643⤵
PID:13788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
644⤵
PID:13800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
645⤵
PID:13816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
646⤵
PID:13832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
647⤵
PID:13852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
648⤵
PID:13864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
649⤵
PID:13880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
650⤵
PID:13892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
651⤵
PID:13912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
652⤵
PID:13924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
653⤵
PID:13940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
654⤵
PID:13956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
655⤵
PID:13968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
656⤵
PID:13984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
657⤵
PID:14000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
658⤵
PID:14012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
659⤵
PID:14024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
660⤵
PID:14040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
661⤵
PID:14056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
662⤵
PID:14072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
663⤵
PID:14084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
664⤵
PID:14104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
665⤵
PID:14120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
666⤵
PID:14136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
667⤵
PID:14152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
668⤵
PID:14168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
669⤵
PID:14184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
670⤵
PID:14200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
671⤵
PID:14220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
672⤵
PID:14236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
673⤵
PID:14252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
674⤵
PID:14268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
675⤵
PID:14284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
676⤵
PID:14300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
677⤵
PID:14316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
678⤵
PID:14332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
679⤵
PID:788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
680⤵
PID:7616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
681⤵
PID:14344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
682⤵
PID:14360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
683⤵
PID:14376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
684⤵
PID:14392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
685⤵
PID:14408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
686⤵
PID:14424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
687⤵
PID:14436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
688⤵
PID:14452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
689⤵
PID:14468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
690⤵
PID:14480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
691⤵
PID:14496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
692⤵
PID:14508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
693⤵
PID:14524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
694⤵
PID:14540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
695⤵
PID:14556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
696⤵
PID:14572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
697⤵
PID:14588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
698⤵
PID:14604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
699⤵
PID:14616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
700⤵
PID:14628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
701⤵
PID:14644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
702⤵
PID:14656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
703⤵
PID:14668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
704⤵
PID:14684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
705⤵
PID:14700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
706⤵
PID:14716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
707⤵
PID:14732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
708⤵
PID:14748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
709⤵
PID:14760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
710⤵
PID:14776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
711⤵
PID:14788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
712⤵
PID:14804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
713⤵
PID:14820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
714⤵
PID:14836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
715⤵
PID:14852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
716⤵
PID:14868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
717⤵
PID:14884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
718⤵
PID:14900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
719⤵
PID:14916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
720⤵
PID:14932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
721⤵
PID:14944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
722⤵
PID:14960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
723⤵
PID:14976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
724⤵
PID:14988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
725⤵
PID:15004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
726⤵
PID:15020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
727⤵
PID:15036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
728⤵
PID:15048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
729⤵
PID:15064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
730⤵
PID:15080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
731⤵
PID:15092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
732⤵
PID:15108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
733⤵
PID:15124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
734⤵
PID:15140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
735⤵
PID:15156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
736⤵
PID:15172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
737⤵
PID:15188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
738⤵
PID:15204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
739⤵
PID:15216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
740⤵
PID:15236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
741⤵
PID:15252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
742⤵
PID:15268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
743⤵
PID:15284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
744⤵
PID:15300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
745⤵
PID:15316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
746⤵
PID:15332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
747⤵
PID:15344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
748⤵
PID:15356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
749⤵
PID:15372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
750⤵
PID:15388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
751⤵
PID:15400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
752⤵
PID:15416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
753⤵
PID:15432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
754⤵
PID:15448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
755⤵
PID:15464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
756⤵
PID:15476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
757⤵
PID:15496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
758⤵
PID:15512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
759⤵
PID:15528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
760⤵
PID:15544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
761⤵
PID:15560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
762⤵
PID:15572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
763⤵
PID:15588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
764⤵
PID:15604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
765⤵
PID:15620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
766⤵
PID:15636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
767⤵
PID:15652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
768⤵
PID:15668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
769⤵
PID:15684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
770⤵
PID:15700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
771⤵
PID:15716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
772⤵
PID:15732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
773⤵
PID:15748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
774⤵
PID:15764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
775⤵
PID:15776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
776⤵
PID:15792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
777⤵
PID:15808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
778⤵
PID:15820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
779⤵
PID:15836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
780⤵
PID:15852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
781⤵
PID:15864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
782⤵
PID:15876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
783⤵
PID:15896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
784⤵
PID:15912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
785⤵
PID:15928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
786⤵
PID:15944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
787⤵
PID:15960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
788⤵
PID:15976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
789⤵
PID:15992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
790⤵
PID:16004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
791⤵
PID:16016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
792⤵
PID:16032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
793⤵
PID:16048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
794⤵
PID:16064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
795⤵
PID:16080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
796⤵
PID:16092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
797⤵
PID:16108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
798⤵
PID:16120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
799⤵
PID:16136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
800⤵
PID:16152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
801⤵
PID:16168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
802⤵
PID:16184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
803⤵
PID:16200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
804⤵
PID:16216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
805⤵
PID:16232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
806⤵
PID:16248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
807⤵
PID:16268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
808⤵
PID:16284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
809⤵
PID:16316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
810⤵
PID:16332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
811⤵
PID:16348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
812⤵
PID:16364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
813⤵
PID:16380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
814⤵
PID:2124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
815⤵
PID:2944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
816⤵
PID:16396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
817⤵
PID:16412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
818⤵
PID:16436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
819⤵
PID:16448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
820⤵
PID:16468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
821⤵
PID:16484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
822⤵
PID:16496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
823⤵
PID:16508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
824⤵
PID:16524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
825⤵
PID:16540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
826⤵
PID:16556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
827⤵
PID:16572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
828⤵
PID:16588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
829⤵
PID:16604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
830⤵
PID:16620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
831⤵
PID:16636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
832⤵
PID:16652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
833⤵
PID:16668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
834⤵
PID:16684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
835⤵
PID:16700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
836⤵
PID:16712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
837⤵
PID:16728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
838⤵
PID:16744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
839⤵
PID:16756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
840⤵
PID:16768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
841⤵
PID:16788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
842⤵
PID:16804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
843⤵
PID:16824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
844⤵
PID:16836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
845⤵
PID:16852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
846⤵
PID:16864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
847⤵
PID:16884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
848⤵
PID:16896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
849⤵
PID:16912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
850⤵
PID:16928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
851⤵
PID:16944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
852⤵
PID:16960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
853⤵
PID:16976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
854⤵
PID:16988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
855⤵
PID:17008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
856⤵
PID:17024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
857⤵
PID:17036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
858⤵
PID:17052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
859⤵
PID:17064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
860⤵
PID:17080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
861⤵
PID:17096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
862⤵
PID:17112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
863⤵
PID:17128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
864⤵
PID:17140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
865⤵
PID:17156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
866⤵
PID:17172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
867⤵
PID:17188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
868⤵
PID:17204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
869⤵
PID:17220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
870⤵
PID:17236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
871⤵
PID:17252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
872⤵
PID:17268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
873⤵
PID:17284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
874⤵
PID:17296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
875⤵
PID:17312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
876⤵
PID:17324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
877⤵
PID:17340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
878⤵
PID:17356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
879⤵
PID:17372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
880⤵
PID:17388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6950d52ac5be349ed494cddd9e372a03_JaffaCakes118.dll,#1
881⤵
PID:17404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/920-0-0x0000000074BE0000-0x0000000074E64000-memory.dmp

Filesize
2.5MB

Download
memory/3124-4-0x0000000074BE0000-0x0000000074E64000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing