0b59276a464bb3598782f014d196ff55a5fe22ef87137c376fab13ef59faad27

Analysis

max time kernel
142s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 02:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll
Size 284KB
Sample240613-cjtrdsthpl
SHA256 0b59276a464bb3598782f014d196ff55a5fe22ef87137c376fab13ef59faad27
MD5 a37d0cd35aa1f74dccbb9721311717fa
SHA1 1f15a783342814d50dac95f39ee3d3d6ba051f2c
SHA512 a5fb897ce5d0d711e6f889619230d8c0ded09b519526d4c5d85d2539407a465c6dceeb45c5897f9bae493f8eaa73440d4e1563b40ae6a2c2719e958cbfbd208a
SSDEEP 6144:yE9l9yUqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbB:yvbLgPlu+QhMb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 4584	3056	rundll32.exe	89
PID 3056 wrote to memory of 4584	3056	rundll32.exe	89
PID 3056 wrote to memory of 4584	3056	rundll32.exe	89
PID 4584 wrote to memory of 4180	4584	rundll32.exe	90
PID 4584 wrote to memory of 4180	4584	rundll32.exe	90
PID 4584 wrote to memory of 4180	4584	rundll32.exe	90
PID 4180 wrote to memory of 4856	4180	rundll32.exe	91
PID 4180 wrote to memory of 4856	4180	rundll32.exe	91
PID 4180 wrote to memory of 4856	4180	rundll32.exe	91
PID 4856 wrote to memory of 1332	4856	rundll32.exe	92
PID 4856 wrote to memory of 1332	4856	rundll32.exe	92
PID 4856 wrote to memory of 1332	4856	rundll32.exe	92
PID 1332 wrote to memory of 864	1332	rundll32.exe	93
PID 1332 wrote to memory of 864	1332	rundll32.exe	93
PID 1332 wrote to memory of 864	1332	rundll32.exe	93
PID 864 wrote to memory of 3196	864	rundll32.exe	94
PID 864 wrote to memory of 3196	864	rundll32.exe	94
PID 864 wrote to memory of 3196	864	rundll32.exe	94
PID 3196 wrote to memory of 3208	3196	rundll32.exe	95
PID 3196 wrote to memory of 3208	3196	rundll32.exe	95
PID 3196 wrote to memory of 3208	3196	rundll32.exe	95
PID 3208 wrote to memory of 2860	3208	rundll32.exe	96
PID 3208 wrote to memory of 2860	3208	rundll32.exe	96
PID 3208 wrote to memory of 2860	3208	rundll32.exe	96
PID 2860 wrote to memory of 2904	2860	rundll32.exe	97
PID 2860 wrote to memory of 2904	2860	rundll32.exe	97
PID 2860 wrote to memory of 2904	2860	rundll32.exe	97
PID 2904 wrote to memory of 5072	2904	rundll32.exe	98
PID 2904 wrote to memory of 5072	2904	rundll32.exe	98
PID 2904 wrote to memory of 5072	2904	rundll32.exe	98
PID 5072 wrote to memory of 3176	5072	rundll32.exe	99
PID 5072 wrote to memory of 3176	5072	rundll32.exe	99
PID 5072 wrote to memory of 3176	5072	rundll32.exe	99
PID 3176 wrote to memory of 4108	3176	rundll32.exe	100
PID 3176 wrote to memory of 4108	3176	rundll32.exe	100
PID 3176 wrote to memory of 4108	3176	rundll32.exe	100
PID 4108 wrote to memory of 3232	4108	rundll32.exe	101
PID 4108 wrote to memory of 3232	4108	rundll32.exe	101
PID 4108 wrote to memory of 3232	4108	rundll32.exe	101
PID 3232 wrote to memory of 208	3232	rundll32.exe	102
PID 3232 wrote to memory of 208	3232	rundll32.exe	102
PID 3232 wrote to memory of 208	3232	rundll32.exe	102
PID 208 wrote to memory of 3396	208	rundll32.exe	103
PID 208 wrote to memory of 3396	208	rundll32.exe	103
PID 208 wrote to memory of 3396	208	rundll32.exe	103
PID 3396 wrote to memory of 4460	3396	rundll32.exe	104
PID 3396 wrote to memory of 4460	3396	rundll32.exe	104
PID 3396 wrote to memory of 4460	3396	rundll32.exe	104
PID 4460 wrote to memory of 4476	4460	rundll32.exe	105
PID 4460 wrote to memory of 4476	4460	rundll32.exe	105
PID 4460 wrote to memory of 4476	4460	rundll32.exe	105
PID 4476 wrote to memory of 1692	4476	rundll32.exe	106
PID 4476 wrote to memory of 1692	4476	rundll32.exe	106
PID 4476 wrote to memory of 1692	4476	rundll32.exe	106
PID 1692 wrote to memory of 636	1692	rundll32.exe	107
PID 1692 wrote to memory of 636	1692	rundll32.exe	107
PID 1692 wrote to memory of 636	1692	rundll32.exe	107
PID 636 wrote to memory of 888	636	rundll32.exe	108
PID 636 wrote to memory of 888	636	rundll32.exe	108
PID 636 wrote to memory of 888	636	rundll32.exe	108
PID 888 wrote to memory of 3380	888	rundll32.exe	109
PID 888 wrote to memory of 3380	888	rundll32.exe	109
PID 888 wrote to memory of 3380	888	rundll32.exe	109
PID 3380 wrote to memory of 2992	3380	rundll32.exe	110

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4584
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4180
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4856
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1332
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:2860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:2904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:5072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:3380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        23⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        24⤵
        
        PID:3940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        25⤵
        
        PID:1148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        26⤵
        
        PID:3932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        27⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        28⤵
        
        PID:2284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        29⤵
        
        PID:3800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        30⤵
        
        PID:2324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        31⤵
        
        PID:4932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        32⤵
        
        PID:4848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        33⤵
        
        PID:1092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        34⤵
        
        PID:1540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        35⤵
        
        PID:992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        36⤵
        
        PID:1800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        37⤵
        
        PID:336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        38⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        39⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        40⤵
        
        PID:2792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        41⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        42⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        43⤵
        
        PID:1136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        44⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        45⤵
        
        PID:1656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        46⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        47⤵
        
        PID:3780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        48⤵
        
        PID:3840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        49⤵
        
        PID:3468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        50⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        51⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        52⤵
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        53⤵
        
        PID:3188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        54⤵
        
        PID:320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        55⤵
        
        PID:2608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        56⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        57⤵
        
        PID:4560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        58⤵
        
        PID:1008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        59⤵
        
        PID:2364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        60⤵
        
        PID:4708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        61⤵
        
        PID:5048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        62⤵
        
        PID:1840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        63⤵
        
        PID:2964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        64⤵
        
        PID:1328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        65⤵
        
        PID:2600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        66⤵
        
        PID:2568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        67⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        68⤵
        
        PID:1320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        69⤵
        
        PID:3464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        70⤵
        
        PID:876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        71⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        72⤵
        
        PID:4380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        73⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        74⤵
        
        PID:3144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        75⤵
        
        PID:4812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        76⤵
        
        PID:908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        77⤵
        
        PID:3200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        78⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        79⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        80⤵
        
        PID:5156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        81⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        82⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        83⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        84⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        85⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        86⤵
        
        PID:5248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        87⤵
        
        PID:5264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        88⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        89⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        90⤵
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        91⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        92⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        93⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        94⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        95⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        96⤵
        
        PID:5408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        97⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        98⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        99⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        100⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        101⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        102⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        103⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        104⤵
        
        PID:5532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        105⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        106⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        107⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        108⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        109⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        110⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        111⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        112⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        113⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        114⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        115⤵
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        116⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        117⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        118⤵
        
        PID:5748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        119⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        120⤵
        
        PID:5776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        121⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        122⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        123⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        124⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        125⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        126⤵
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        127⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        128⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        129⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        130⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        131⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        132⤵
        
        PID:5964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        133⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        134⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        135⤵
        
        PID:6016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        136⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        137⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        138⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        139⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        140⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        141⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        142⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        143⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        144⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        145⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        146⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        147⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        148⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        149⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        150⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        151⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        152⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        153⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        154⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        155⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        156⤵
        
        PID:6344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        157⤵
        
        PID:6360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        158⤵
        
        PID:6376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        159⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        160⤵
        
        PID:6408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        161⤵
        
        PID:6424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        162⤵
        
        PID:6440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        163⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        164⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        165⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        166⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        167⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        168⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        169⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        170⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        171⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        172⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        173⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        174⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        175⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        176⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        177⤵
        
        PID:6676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        178⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        179⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        180⤵
        
        PID:6724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        181⤵
        
        PID:6736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        182⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        183⤵
        
        PID:6768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        184⤵
        
        PID:6784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        185⤵
        
        PID:6800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        186⤵
        
        PID:6824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        187⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        188⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        189⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        190⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        191⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        192⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        193⤵
        
        PID:6932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        194⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        195⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        196⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        197⤵
        
        PID:6992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        198⤵
        
        PID:7008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        199⤵
        
        PID:7020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        200⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        201⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        202⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        203⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        204⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        205⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        206⤵
        
        PID:2524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        207⤵
        
        PID:4600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        208⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        209⤵
        
        PID:2292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        210⤵
        
        PID:4308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        211⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        212⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        213⤵
        
        PID:3304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        214⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        215⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        216⤵
        
        PID:7220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        217⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        218⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        219⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        220⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        221⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        222⤵
        
        PID:7316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        223⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        224⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        225⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        226⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        227⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        228⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        229⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        230⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        231⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        232⤵
        
        PID:7472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        233⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        234⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        235⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        236⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        237⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        238⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        239⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        240⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        241⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        242⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        243⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        244⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        245⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        246⤵
        
        PID:7700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        247⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        248⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        249⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        250⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        251⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        252⤵
        
        PID:7796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        253⤵
        
        PID:7812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        254⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        255⤵
        
        PID:7844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        256⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        257⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        258⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        259⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        260⤵
        
        PID:7928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        261⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        262⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        263⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        264⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        265⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        266⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        267⤵
        
        PID:8028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        268⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        269⤵
        
        PID:8056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        270⤵
        
        PID:8072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        271⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        272⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        273⤵
        
        PID:8120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        274⤵
        
        PID:8136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        275⤵
        
        PID:8152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        276⤵
        
        PID:8168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        277⤵
        
        PID:8184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        278⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        279⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        280⤵
        
        PID:8228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        281⤵
        
        PID:8240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        282⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        283⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        284⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        285⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        286⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        287⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        288⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        289⤵
        
        PID:8364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        290⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        291⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        292⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        293⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        294⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        295⤵
        
        PID:8452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        296⤵
        
        PID:8468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        297⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        298⤵
        
        PID:8500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        299⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        300⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        301⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        302⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        303⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        304⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        305⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        306⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        307⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        308⤵
        
        PID:8664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        309⤵
        
        PID:8680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        310⤵
        
        PID:8696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        311⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        312⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        313⤵
        
        PID:8744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        314⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        315⤵
        
        PID:8768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        316⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        317⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        318⤵
        
        PID:8816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        319⤵
        
        PID:8832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        320⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        321⤵
        
        PID:8864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        322⤵
        
        PID:8880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        323⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        324⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        325⤵
        
        PID:8924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        326⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        327⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        328⤵
        
        PID:8976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        329⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        330⤵
        
        PID:9008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        331⤵
        
        PID:9024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        332⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        333⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        334⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        335⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        336⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        337⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        338⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        339⤵
        
        PID:9136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        340⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        341⤵
        
        PID:9164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        342⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        343⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        344⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        345⤵
        
        PID:9224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        346⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        347⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        348⤵
        
        PID:9272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        349⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        350⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        351⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        352⤵
        
        PID:9332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        353⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        354⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        355⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        356⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        357⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        358⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        359⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        360⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        361⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        362⤵
        
        PID:9476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        363⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        364⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        365⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        366⤵
        
        PID:9544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        367⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        368⤵
        
        PID:9572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        369⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        370⤵
        
        PID:9608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        371⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        372⤵
        
        PID:9640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        373⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        374⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        375⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        376⤵
        
        PID:9708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        377⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        378⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        379⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        380⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        381⤵
        
        PID:9840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        382⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        383⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        384⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        385⤵
        
        PID:9896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        386⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        387⤵
        
        PID:9928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        388⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        389⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        390⤵
        
        PID:9976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        391⤵
        
        PID:9992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        392⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        393⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        394⤵
        
        PID:10036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        395⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        396⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        397⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        398⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        399⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        400⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        401⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        402⤵
        
        PID:10156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        403⤵
        
        PID:10172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        404⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        405⤵
        
        PID:10204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        406⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        407⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        408⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        409⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        410⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        411⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        412⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        413⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        414⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        415⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        416⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        417⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        418⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        419⤵
        
        PID:10404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        420⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        421⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        422⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        423⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        424⤵
        
        PID:10484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        425⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        426⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        427⤵
        
        PID:10528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        428⤵
        
        PID:10544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        429⤵
        
        PID:10556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        430⤵
        
        PID:10572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        431⤵
        
        PID:10588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        432⤵
        
        PID:10604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        433⤵
        
        PID:10620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        434⤵
        
        PID:10636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        435⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        436⤵
        
        PID:10664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        437⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        438⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        439⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        440⤵
        
        PID:10724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        441⤵
        
        PID:10740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        442⤵
        
        PID:10756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        443⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        444⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        445⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        446⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        447⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        448⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        449⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        450⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        451⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        452⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        453⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        454⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        455⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        456⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        457⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        458⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        459⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        460⤵
        
        PID:11040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        461⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        462⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        463⤵
        
        PID:11084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        464⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        465⤵
        
        PID:11116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        466⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        467⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        468⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        469⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        470⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        471⤵
        
        PID:11208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        472⤵
        
        PID:11220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        473⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        474⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        475⤵
        
        PID:2440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        476⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        477⤵
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        478⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        479⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        480⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        481⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        482⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        483⤵
        
        PID:11388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        484⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        485⤵
        
        PID:11412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        486⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        487⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        488⤵
        
        PID:11456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        489⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        490⤵
        
        PID:11492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        491⤵
        
        PID:11508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        492⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        493⤵
        
        PID:11536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        494⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        495⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        496⤵
        
        PID:11580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        497⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        498⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        499⤵
        
        PID:11624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        500⤵
        
        PID:11640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        501⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        502⤵
        
        PID:11668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        503⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        504⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        505⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        506⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        507⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        508⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        509⤵
        
        PID:11776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        510⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        511⤵
        
        PID:11808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        512⤵
        
        PID:11824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        513⤵
        
        PID:11836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        514⤵
        
        PID:11852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        515⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        516⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        517⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        518⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        519⤵
        
        PID:11928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        520⤵
        
        PID:11944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        521⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        522⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        523⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        524⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        525⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        526⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        527⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        528⤵
        
        PID:12060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        529⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        530⤵
        
        PID:12088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        531⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        532⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        533⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        534⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        535⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        536⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        537⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        538⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        539⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        540⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        541⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        542⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        543⤵
        
        PID:3740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        544⤵
        
        PID:12292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        545⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        546⤵
        
        PID:12324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        547⤵
        
        PID:12340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        548⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        549⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        550⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        551⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        552⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        553⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        554⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        555⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        556⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        557⤵
        
        PID:12496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        558⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        559⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        560⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        561⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        562⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        563⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        564⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        565⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        566⤵
        
        PID:12636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        567⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        568⤵
        
        PID:12664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        569⤵
        
        PID:12680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        570⤵
        
        PID:12696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        571⤵
        
        PID:12712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        572⤵
        
        PID:12728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        573⤵
        
        PID:12744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        574⤵
        
        PID:12760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        575⤵
        
        PID:12772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        576⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        577⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        578⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        579⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        580⤵
        
        PID:12852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        581⤵
        
        PID:12868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        582⤵
        
        PID:12884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        583⤵
        
        PID:12900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        584⤵
        
        PID:12916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        585⤵
        
        PID:12932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        586⤵
        
        PID:12944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        587⤵
        
        PID:12956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        588⤵
        
        PID:12968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        589⤵
        
        PID:12984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        590⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        591⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        592⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        593⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        594⤵
        
        PID:13064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        595⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        596⤵
        
        PID:13092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        597⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        598⤵
        
        PID:13124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        599⤵
        
        PID:13140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        600⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        601⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        602⤵
        
        PID:13188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        603⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        604⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        605⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        606⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        607⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        608⤵
        
        PID:13276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        609⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        610⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        611⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        612⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        613⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        614⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        615⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        616⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        617⤵
        
        PID:13408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        618⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        619⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        620⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        621⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        622⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        623⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        624⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        625⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        626⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        627⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        628⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        629⤵
        
        PID:13588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        630⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        631⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        632⤵
        
        PID:13632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        633⤵
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        634⤵
        
        PID:13664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        635⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        636⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        637⤵
        
        PID:13708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        638⤵
        
        PID:13724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        639⤵
        
        PID:13740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        640⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        641⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        642⤵
        
        PID:13784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        643⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        644⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        645⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        646⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        647⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        648⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        649⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        650⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        651⤵
        
        PID:13920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        652⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        653⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        654⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        655⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        656⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        657⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        658⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        659⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        660⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        661⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        662⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        663⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        664⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        665⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        666⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        667⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        668⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        669⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        670⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        671⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        672⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        673⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        674⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        675⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        676⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        677⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        678⤵
        
        PID:4376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        679⤵
        
        PID:14348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        680⤵
        
        PID:14364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        681⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        682⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        683⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        684⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        685⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        686⤵
        
        PID:14460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        687⤵
        
        PID:14476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        688⤵
        
        PID:14492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        689⤵
        
        PID:14508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        690⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        691⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        692⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        693⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        694⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        695⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        696⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        697⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        698⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        699⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        700⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        701⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        702⤵
        
        PID:14712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        703⤵
        
        PID:14728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        704⤵
        
        PID:14744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        705⤵
        
        PID:14760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        706⤵
        
        PID:14776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        707⤵
        
        PID:14792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        708⤵
        
        PID:14804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        709⤵
        
        PID:14820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        710⤵
        
        PID:14836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        711⤵
        
        PID:14852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        712⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        713⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        714⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        715⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        716⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        717⤵
        
        PID:14940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        718⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        719⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        720⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        721⤵
        
        PID:14996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        722⤵
        
        PID:15008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        723⤵
        
        PID:15024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        724⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        725⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        726⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        727⤵
        
        PID:15088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        728⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        729⤵
        
        PID:15116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        730⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        731⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        732⤵
        
        PID:15164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        733⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        734⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        735⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        736⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        737⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        738⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        739⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        740⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        741⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        742⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        743⤵
        
        PID:15336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        744⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        745⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        746⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        747⤵
        
        PID:15388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        748⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        749⤵
        
        PID:15420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        750⤵
        
        PID:15432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        751⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        752⤵
        
        PID:15464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        753⤵
        
        PID:15476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        754⤵
        
        PID:15496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        755⤵
        
        PID:15512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        756⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        757⤵
        
        PID:15540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        758⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        759⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        760⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        761⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        762⤵
        
        PID:15620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        763⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        764⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        765⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        766⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        767⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        768⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        769⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        770⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        771⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        772⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        773⤵
        
        PID:15792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        774⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        775⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        776⤵
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        777⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        778⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        779⤵
        
        PID:15884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        780⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        781⤵
        
        PID:15916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        782⤵
        
        PID:15932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        783⤵
        
        PID:15948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        784⤵
        
        PID:15964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        785⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        786⤵
        
        PID:15996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        787⤵
        
        PID:16012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        788⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        789⤵
        
        PID:16036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        790⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        791⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        792⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        793⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        794⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        795⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        796⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        797⤵
        
        PID:16160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        798⤵
        
        PID:16176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        799⤵
        
        PID:16192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        800⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        801⤵
        
        PID:16224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        802⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        803⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        804⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        805⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        806⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        807⤵
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        808⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        809⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        810⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        811⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        812⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        813⤵
        
        PID:16400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        814⤵
        
        PID:16412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        815⤵
        
        PID:16428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        816⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        817⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        818⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        819⤵
        
        PID:16488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        820⤵
        
        PID:16504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        821⤵
        
        PID:16520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        822⤵
        
        PID:16536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        823⤵
        
        PID:16552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        824⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        825⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        826⤵
        
        PID:16596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        827⤵
        
        PID:16608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        828⤵
        
        PID:16624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        829⤵
        
        PID:16640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        830⤵
        
        PID:16656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        831⤵
        
        PID:16672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        832⤵
        
        PID:16688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        833⤵
        
        PID:16704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        834⤵
        
        PID:16720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        835⤵
        
        PID:16740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        836⤵
        
        PID:16756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        837⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        838⤵
        
        PID:16788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        839⤵
        
        PID:16804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        840⤵
        
        PID:16816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        841⤵
        
        PID:16832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        842⤵
        
        PID:16848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        843⤵
        
        PID:16864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        844⤵
        
        PID:16880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        845⤵
        
        PID:16892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        846⤵
        
        PID:16904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        847⤵
        
        PID:16916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        848⤵
        
        PID:16932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        849⤵
        
        PID:16948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        850⤵
        
        PID:16964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        851⤵
        
        PID:16980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        852⤵
        
        PID:16996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        853⤵
        
        PID:17012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        854⤵
        
        PID:17028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        855⤵
        
        PID:17044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        856⤵
        
        PID:17060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        857⤵
        
        PID:17076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        858⤵
        
        PID:17092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        859⤵
        
        PID:17104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        860⤵
        
        PID:17120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        861⤵
        
        PID:17136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        862⤵
        
        PID:17152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        863⤵
        
        PID:17168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        864⤵
        
        PID:17180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        865⤵
        
        PID:17196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        866⤵
        
        PID:17212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        867⤵
        
        PID:17228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        868⤵
        
        PID:17240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        869⤵
        
        PID:17256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        870⤵
        
        PID:17272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        871⤵
        
        PID:17288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\a37d0cd35aa1f74dccbb9721311717fa_JaffaCakes118.dll,#1
        872⤵
        
        PID:17304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4180,i,1999448010053300448,1112699187621658374,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:8
1⤵
PID:7028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/17212-1-0x0000000075570000-0x00000000757F4000-memory.dmp

Download

memory/17228-0-0x0000000075570000-0x00000000757F4000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads