5213827b41aab884de4fa9d1909ce9170a640f3f31b5468d88609bb43236a458

Analysis

max time kernel
138s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 03:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll
Size

94KB
MD5

0281d783e32d531ceb588762ca82327c
SHA1

4835991efcf2bc3d6155cc4893b843ddd42e133b
SHA256

5213827b41aab884de4fa9d1909ce9170a640f3f31b5468d88609bb43236a458
SHA512

ad0115d58ef4ade42e08e37783c3da3503be7d92d1278743a1ec31832d9ef087b5c1ba6c64377dbf406f0fce1a79a31d7f8bb1404e92eb3ce331b3fa05785684
SSDEEP

1536:TtHeZcgCHI+BOZcuI/N+x1kLmpNg4TotPOhr/nC2DFoYwsk:JHeXma9qN+x1/RToF2Dfwsk

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3104 wrote to memory of 2964	3104	rundll32.exe	82
PID 3104 wrote to memory of 2964	3104	rundll32.exe	82
PID 3104 wrote to memory of 2964	3104	rundll32.exe	82
PID 2964 wrote to memory of 1952	2964	rundll32.exe	83
PID 2964 wrote to memory of 1952	2964	rundll32.exe	83
PID 2964 wrote to memory of 1952	2964	rundll32.exe	83
PID 1952 wrote to memory of 1480	1952	rundll32.exe	84
PID 1952 wrote to memory of 1480	1952	rundll32.exe	84
PID 1952 wrote to memory of 1480	1952	rundll32.exe	84
PID 1480 wrote to memory of 1820	1480	rundll32.exe	85
PID 1480 wrote to memory of 1820	1480	rundll32.exe	85
PID 1480 wrote to memory of 1820	1480	rundll32.exe	85
PID 1820 wrote to memory of 3508	1820	rundll32.exe	86
PID 1820 wrote to memory of 3508	1820	rundll32.exe	86
PID 1820 wrote to memory of 3508	1820	rundll32.exe	86
PID 3508 wrote to memory of 2156	3508	rundll32.exe	87
PID 3508 wrote to memory of 2156	3508	rundll32.exe	87
PID 3508 wrote to memory of 2156	3508	rundll32.exe	87
PID 2156 wrote to memory of 1512	2156	rundll32.exe	88
PID 2156 wrote to memory of 1512	2156	rundll32.exe	88
PID 2156 wrote to memory of 1512	2156	rundll32.exe	88
PID 1512 wrote to memory of 1532	1512	rundll32.exe	89
PID 1512 wrote to memory of 1532	1512	rundll32.exe	89
PID 1512 wrote to memory of 1532	1512	rundll32.exe	89
PID 1532 wrote to memory of 2508	1532	rundll32.exe	90
PID 1532 wrote to memory of 2508	1532	rundll32.exe	90
PID 1532 wrote to memory of 2508	1532	rundll32.exe	90
PID 2508 wrote to memory of 1580	2508	rundll32.exe	91
PID 2508 wrote to memory of 1580	2508	rundll32.exe	91
PID 2508 wrote to memory of 1580	2508	rundll32.exe	91
PID 1580 wrote to memory of 2388	1580	rundll32.exe	92
PID 1580 wrote to memory of 2388	1580	rundll32.exe	92
PID 1580 wrote to memory of 2388	1580	rundll32.exe	92
PID 2388 wrote to memory of 3132	2388	rundll32.exe	93
PID 2388 wrote to memory of 3132	2388	rundll32.exe	93
PID 2388 wrote to memory of 3132	2388	rundll32.exe	93
PID 3132 wrote to memory of 4264	3132	rundll32.exe	94
PID 3132 wrote to memory of 4264	3132	rundll32.exe	94
PID 3132 wrote to memory of 4264	3132	rundll32.exe	94
PID 4264 wrote to memory of 3456	4264	rundll32.exe	95
PID 4264 wrote to memory of 3456	4264	rundll32.exe	95
PID 4264 wrote to memory of 3456	4264	rundll32.exe	95
PID 3456 wrote to memory of 3068	3456	rundll32.exe	96
PID 3456 wrote to memory of 3068	3456	rundll32.exe	96
PID 3456 wrote to memory of 3068	3456	rundll32.exe	96
PID 3068 wrote to memory of 4588	3068	rundll32.exe	97
PID 3068 wrote to memory of 4588	3068	rundll32.exe	97
PID 3068 wrote to memory of 4588	3068	rundll32.exe	97
PID 4588 wrote to memory of 4612	4588	rundll32.exe	98
PID 4588 wrote to memory of 4612	4588	rundll32.exe	98
PID 4588 wrote to memory of 4612	4588	rundll32.exe	98
PID 4612 wrote to memory of 3224	4612	rundll32.exe	99
PID 4612 wrote to memory of 3224	4612	rundll32.exe	99
PID 4612 wrote to memory of 3224	4612	rundll32.exe	99
PID 3224 wrote to memory of 2092	3224	rundll32.exe	100
PID 3224 wrote to memory of 2092	3224	rundll32.exe	100
PID 3224 wrote to memory of 2092	3224	rundll32.exe	100
PID 2092 wrote to memory of 1296	2092	rundll32.exe	101
PID 2092 wrote to memory of 1296	2092	rundll32.exe	101
PID 2092 wrote to memory of 1296	2092	rundll32.exe	101
PID 1296 wrote to memory of 4952	1296	rundll32.exe	102
PID 1296 wrote to memory of 4952	1296	rundll32.exe	102
PID 1296 wrote to memory of 4952	1296	rundll32.exe	102
PID 4952 wrote to memory of 632	4952	rundll32.exe	103

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3104
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2964
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1952
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1480
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1820
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:2156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:1512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:2508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:1580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:4264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:3456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:3224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:2092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:1296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        23⤵
        
        PID:632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        24⤵
        
        PID:664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        25⤵
        
        PID:4644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        26⤵
        
        PID:2252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        27⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        28⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        29⤵
        
        PID:560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        30⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        31⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        32⤵
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        33⤵
        
        PID:4980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        34⤵
        
        PID:3244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        35⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        36⤵
        
        PID:3820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        37⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        38⤵
        
        PID:684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        39⤵
        
        PID:1540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        40⤵
        
        PID:4608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        41⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        42⤵
        
        PID:4272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        43⤵
        
        PID:3168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        44⤵
        
        PID:1008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        45⤵
        
        PID:2284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        46⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        47⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        48⤵
        
        PID:4488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        49⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        50⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        51⤵
        
        PID:5064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        52⤵
        
        PID:2700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        53⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        54⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        55⤵
        
        PID:2152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        56⤵
        
        PID:2740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        57⤵
        
        PID:456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        58⤵
        
        PID:1452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        59⤵
        
        PID:1756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        60⤵
        
        PID:4640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        61⤵
        
        PID:4796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        62⤵
        
        PID:3684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        63⤵
        
        PID:904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        64⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        65⤵
        
        PID:448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        66⤵
        
        PID:4512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        67⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        68⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        69⤵
        
        PID:3556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        70⤵
        
        PID:2000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        71⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        72⤵
        
        PID:3336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        73⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        74⤵
        
        PID:4756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        75⤵
        
        PID:4312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        76⤵
        
        PID:3596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        77⤵
        
        PID:844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        78⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        79⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        80⤵
        
        PID:4916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        81⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        82⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        83⤵
        
        PID:4184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        84⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        85⤵
        
        PID:1064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        86⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        87⤵
        
        PID:3788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        88⤵
        
        PID:2164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        89⤵
        
        PID:2288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        90⤵
        
        PID:724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        91⤵
        
        PID:2580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        92⤵
        
        PID:4068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        93⤵
        
        PID:1864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        94⤵
        
        PID:2840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        95⤵
        
        PID:1140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        96⤵
        
        PID:2376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        97⤵
        
        PID:4012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        98⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        99⤵
        
        PID:5148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        100⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        101⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        102⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        103⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        104⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        105⤵
        
        PID:5304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        106⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        107⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        108⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        109⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        110⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        111⤵
        
        PID:5444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        112⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        113⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        114⤵
        
        PID:5504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        115⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        116⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        117⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        118⤵
        
        PID:5592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        119⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        120⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        121⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        122⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        123⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        124⤵
        
        PID:5708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        125⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        126⤵
        
        PID:5752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        127⤵
        
        PID:5776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        128⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        129⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        130⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        131⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        132⤵
        
        PID:5876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        133⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        134⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        135⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        136⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        137⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        138⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        139⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        140⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        141⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        142⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        143⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        144⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        145⤵
        
        PID:4704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        146⤵
        
        PID:5180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        147⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        148⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        149⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        150⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        151⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        152⤵
        
        PID:5804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        153⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        154⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        155⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        156⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        157⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        158⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        159⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        160⤵
        
        PID:6328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        161⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        162⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        163⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        164⤵
        
        PID:6408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        165⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        166⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        167⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        168⤵
        
        PID:6492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        169⤵
        
        PID:6512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        170⤵
        
        PID:6524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        171⤵
        
        PID:6540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        172⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        173⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        174⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        175⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        176⤵
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        177⤵
        
        PID:6636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        178⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        179⤵
        
        PID:6664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        180⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        181⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        182⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        183⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        184⤵
        
        PID:6756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        185⤵
        
        PID:6768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        186⤵
        
        PID:6780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        187⤵
        
        PID:6796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        188⤵
        
        PID:6816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        189⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        190⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        191⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        192⤵
        
        PID:6892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        193⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        194⤵
        
        PID:6932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        195⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        196⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        197⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        198⤵
        
        PID:7000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        199⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        200⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        201⤵
        
        PID:7048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        202⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        203⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        204⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        205⤵
        
        PID:7128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        206⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        207⤵
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        208⤵
        
        PID:6204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        209⤵
        
        PID:6376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        210⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        211⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        212⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        213⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        214⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        215⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        216⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        217⤵
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        218⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        219⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        220⤵
        
        PID:7308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        221⤵
        
        PID:7320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        222⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        223⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        224⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        225⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        226⤵
        
        PID:7412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        227⤵
        
        PID:7428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        228⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        229⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        230⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        231⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        232⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        233⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        234⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        235⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        236⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        237⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        238⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        239⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        240⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        241⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        242⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        243⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        244⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        245⤵
        
        PID:7724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        246⤵
        
        PID:7740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        247⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        248⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        249⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        250⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        251⤵
        
        PID:7820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        252⤵
        
        PID:7832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        253⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        254⤵
        
        PID:7864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        255⤵
        
        PID:7880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        256⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        257⤵
        
        PID:7912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        258⤵
        
        PID:7928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        259⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        260⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        261⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        262⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        263⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        264⤵
        
        PID:8072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        265⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        266⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        267⤵
        
        PID:8120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        268⤵
        
        PID:8132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        269⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        270⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        271⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        272⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        273⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        274⤵
        
        PID:7580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        275⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        276⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        277⤵
        
        PID:8184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        278⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        279⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        280⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        281⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        282⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        283⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        284⤵
        
        PID:8308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        285⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        286⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        287⤵
        
        PID:8356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        288⤵
        
        PID:8372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        289⤵
        
        PID:8388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        290⤵
        
        PID:8400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        291⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        292⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        293⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        294⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        295⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        296⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        297⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        298⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        299⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        300⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        301⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        302⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        303⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        304⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        305⤵
        
        PID:8668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        306⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        307⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        308⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        309⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        310⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        311⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        312⤵
        
        PID:8780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        313⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        314⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        315⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        316⤵
        
        PID:8836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        317⤵
        
        PID:8852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        318⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        319⤵
        
        PID:8880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        320⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        321⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        322⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        323⤵
        
        PID:8952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        324⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        325⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        326⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        327⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        328⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        329⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        330⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        331⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        332⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        333⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        334⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        335⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        336⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        337⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        338⤵
        
        PID:9200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        339⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        340⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        341⤵
        
        PID:1224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        342⤵
        
        PID:3236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        343⤵
        
        PID:3256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        344⤵
        
        PID:1016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        345⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        346⤵
        
        PID:2356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        347⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        348⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        349⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        350⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        351⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        352⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        353⤵
        
        PID:9224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        354⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        355⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        356⤵
        
        PID:9272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        357⤵
        
        PID:9284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        358⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        359⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        360⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        361⤵
        
        PID:9348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        362⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        363⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        364⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        365⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        366⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        367⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        368⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        369⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        370⤵
        
        PID:9500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        371⤵
        
        PID:9516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        372⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        373⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        374⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        375⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        376⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        377⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        378⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        379⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        380⤵
        
        PID:9664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        381⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        382⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        383⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        384⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        385⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        386⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        387⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        388⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        389⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        390⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        391⤵
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        392⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        393⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        394⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        395⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        396⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        397⤵
        
        PID:9992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        398⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        399⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        400⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        401⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        402⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        403⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        404⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        405⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        406⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        407⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        408⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        409⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        410⤵
        
        PID:10204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        411⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        412⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        413⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        414⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        415⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        416⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        417⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        418⤵
        
        PID:10248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        419⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        420⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        421⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        422⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        423⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        424⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        425⤵
        
        PID:10368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        426⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        427⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        428⤵
        
        PID:10412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        429⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        430⤵
        
        PID:10436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        431⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        432⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        433⤵
        
        PID:10484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        434⤵
        
        PID:10496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        435⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        436⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        437⤵
        
        PID:10544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        438⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        439⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        440⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        441⤵
        
        PID:10608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        442⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        443⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        444⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        445⤵
        
        PID:10672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        446⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        447⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        448⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        449⤵
        
        PID:10740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        450⤵
        
        PID:10756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        451⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        452⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        453⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        454⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        455⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        456⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        457⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        458⤵
        
        PID:10900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        459⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        460⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        461⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        462⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        463⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        464⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        465⤵
        
        PID:11012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        466⤵
        
        PID:11028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        467⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        468⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        469⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        470⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        471⤵
        
        PID:11112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        472⤵
        
        PID:11128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        473⤵
        
        PID:11144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        474⤵
        
        PID:11160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        475⤵
        
        PID:11176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        476⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        477⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        478⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        479⤵
        
        PID:11244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        480⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        481⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        482⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        483⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        484⤵
        
        PID:11188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        485⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        486⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        487⤵
        
        PID:11292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        488⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        489⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        490⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        491⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        492⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        493⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        494⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        495⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        496⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        497⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        498⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        499⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        500⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        501⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        502⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        503⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        504⤵
        
        PID:11556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        505⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        506⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        507⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        508⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        509⤵
        
        PID:11624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        510⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        511⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        512⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        513⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        514⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        515⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        516⤵
        
        PID:11744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        517⤵
        
        PID:11760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        518⤵
        
        PID:11772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        519⤵
        
        PID:11788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        520⤵
        
        PID:11804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        521⤵
        
        PID:11824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        522⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        523⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        524⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        525⤵
        
        PID:11936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        526⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        527⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        528⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        529⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        530⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        531⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        532⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        533⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        534⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        535⤵
        
        PID:12116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        536⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        537⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        538⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        539⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        540⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        541⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        542⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        543⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        544⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        545⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        546⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        547⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        548⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        549⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        550⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        551⤵
        
        PID:12332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        552⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        553⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        554⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        555⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        556⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        557⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        558⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        559⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        560⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        561⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        562⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        563⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        564⤵
        
        PID:12520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        565⤵
        
        PID:12536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        566⤵
        
        PID:12552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        567⤵
        
        PID:12564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        568⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        569⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        570⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        571⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        572⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        573⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        574⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        575⤵
        
        PID:12684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        576⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        577⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        578⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        579⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        580⤵
        
        PID:12760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        581⤵
        
        PID:12776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        582⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        583⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        584⤵
        
        PID:12812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        585⤵
        
        PID:12824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        586⤵
        
        PID:12840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        587⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        588⤵
        
        PID:12872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        589⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        590⤵
        
        PID:12908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        591⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        592⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        593⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        594⤵
        
        PID:12980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        595⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        596⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        597⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        598⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        599⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        600⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        601⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        602⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        603⤵
        
        PID:13116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        604⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        605⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        606⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        607⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        608⤵
        
        PID:13196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        609⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        610⤵
        
        PID:13220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        611⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        612⤵
        
        PID:13252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        613⤵
        
        PID:13268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        614⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        615⤵
        
        PID:13300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        616⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        617⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        618⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        619⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        620⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        621⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        622⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        623⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        624⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        625⤵
        
        PID:13376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        626⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        627⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        628⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        629⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        630⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        631⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        632⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        633⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        634⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        635⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        636⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        637⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        638⤵
        
        PID:13572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        639⤵
        
        PID:13588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        640⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        641⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        642⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        643⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        644⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        645⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        646⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        647⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        648⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        649⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        650⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        651⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        652⤵
        
        PID:13792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        653⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        654⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        655⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        656⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        657⤵
        
        PID:13868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        658⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        659⤵
        
        PID:13900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        660⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        661⤵
        
        PID:13928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        662⤵
        
        PID:13944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        663⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        664⤵
        
        PID:13976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        665⤵
        
        PID:13992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        666⤵
        
        PID:14008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        667⤵
        
        PID:14024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        668⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        669⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        670⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        671⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        672⤵
        
        PID:14092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        673⤵
        
        PID:14108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        674⤵
        
        PID:14124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        675⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        676⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        677⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        678⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        679⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        680⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        681⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        682⤵
        
        PID:14236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        683⤵
        
        PID:14252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        684⤵
        
        PID:14268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        685⤵
        
        PID:14284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        686⤵
        
        PID:14300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        687⤵
        
        PID:14316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        688⤵
        
        PID:14328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        689⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        690⤵
        
        PID:13644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        691⤵
        
        PID:14352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        692⤵
        
        PID:14364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        693⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        694⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        695⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        696⤵
        
        PID:14432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        697⤵
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        698⤵
        
        PID:14464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        699⤵
        
        PID:14480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        700⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        701⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        702⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        703⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        704⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        705⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        706⤵
        
        PID:14588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        707⤵
        
        PID:14604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        708⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        709⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        710⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        711⤵
        
        PID:14664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        712⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        713⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        714⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        715⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        716⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        717⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        718⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        719⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        720⤵
        
        PID:14812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        721⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        722⤵
        
        PID:14852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        723⤵
        
        PID:14868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        724⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        725⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        726⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        727⤵
        
        PID:14928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        728⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        729⤵
        
        PID:14964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        730⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        731⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        732⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        733⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        734⤵
        
        PID:15052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        735⤵
        
        PID:15068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        736⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        737⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        738⤵
        
        PID:15104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        739⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        740⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        741⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        742⤵
        
        PID:15164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        743⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        744⤵
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        745⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        746⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        747⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        748⤵
        
        PID:15264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        749⤵
        
        PID:15280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        750⤵
        
        PID:15296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        751⤵
        
        PID:15312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        752⤵
        
        PID:15328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        753⤵
        
        PID:15344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        754⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        755⤵
        
        PID:14996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        756⤵
        
        PID:15368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        757⤵
        
        PID:15384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        758⤵
        
        PID:15400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        759⤵
        
        PID:15412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        760⤵
        
        PID:15424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        761⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        762⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        763⤵
        
        PID:15468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        764⤵
        
        PID:15480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        765⤵
        
        PID:15492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        766⤵
        
        PID:15508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        767⤵
        
        PID:15524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        768⤵
        
        PID:15540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        769⤵
        
        PID:15556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        770⤵
        
        PID:15568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        771⤵
        
        PID:15584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        772⤵
        
        PID:15596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        773⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        774⤵
        
        PID:15624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        775⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        776⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        777⤵
        
        PID:15668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        778⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        779⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        780⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        781⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        782⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        783⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        784⤵
        
        PID:15780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        785⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        786⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        787⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        788⤵
        
        PID:15848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        789⤵
        
        PID:15864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        790⤵
        
        PID:15880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        791⤵
        
        PID:15896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        792⤵
        
        PID:15912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        793⤵
        
        PID:15928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        794⤵
        
        PID:15944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        795⤵
        
        PID:15960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        796⤵
        
        PID:15976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        797⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        798⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        799⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        800⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        801⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        802⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        803⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        804⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        805⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        806⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        807⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        808⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        809⤵
        
        PID:16184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        810⤵
        
        PID:16200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        811⤵
        
        PID:16212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        812⤵
        
        PID:16228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        813⤵
        
        PID:16248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        814⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        815⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        816⤵
        
        PID:16288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        817⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        818⤵
        
        PID:16320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        819⤵
        
        PID:16336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        820⤵
        
        PID:16348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        821⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        822⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        823⤵
        
        PID:2884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        824⤵
        
        PID:4320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        825⤵
        
        PID:15252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        826⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        827⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        828⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        829⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        830⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        831⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        832⤵
        
        PID:16484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        833⤵
        
        PID:16500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        834⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        835⤵
        
        PID:16528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        836⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        837⤵
        
        PID:16552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        838⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        839⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        840⤵
        
        PID:16596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        841⤵
        
        PID:16612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        842⤵
        
        PID:16628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        843⤵
        
        PID:16644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        844⤵
        
        PID:16660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        845⤵
        
        PID:16672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        846⤵
        
        PID:16684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        847⤵
        
        PID:16700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        848⤵
        
        PID:16716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        849⤵
        
        PID:16732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        850⤵
        
        PID:16748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        851⤵
        
        PID:16764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        852⤵
        
        PID:16780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        853⤵
        
        PID:16796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        854⤵
        
        PID:16812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        855⤵
        
        PID:16824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        856⤵
        
        PID:16836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        857⤵
        
        PID:16852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        858⤵
        
        PID:16868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        859⤵
        
        PID:16884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        860⤵
        
        PID:16896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        861⤵
        
        PID:16912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        862⤵
        
        PID:16924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        863⤵
        
        PID:16940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        864⤵
        
        PID:16956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        865⤵
        
        PID:16972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        866⤵
        
        PID:16988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        867⤵
        
        PID:17004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        868⤵
        
        PID:17020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        869⤵
        
        PID:17032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        870⤵
        
        PID:17048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        871⤵
        
        PID:17060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        872⤵
        
        PID:17072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        873⤵
        
        PID:17096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        874⤵
        
        PID:17108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        875⤵
        
        PID:17120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        876⤵
        
        PID:17132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        877⤵
        
        PID:17148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        878⤵
        
        PID:17164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        879⤵
        
        PID:17176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        880⤵
        
        PID:17192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0281d783e32d531ceb588762ca82327c_JaffaCakes118.dll,#1
        881⤵
        
        PID:17208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/448-42-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/456-37-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/560-89-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/632-82-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/632-15-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/664-83-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/664-16-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/684-26-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/724-62-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1008-29-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1296-78-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1368-33-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1480-55-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1480-2-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1512-60-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1532-61-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1532-5-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1580-7-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1580-65-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1752-21-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1752-91-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1756-38-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1820-56-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1920-20-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1920-90-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1952-1-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1952-54-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1960-44-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2000-45-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2020-41-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2092-13-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2092-77-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2156-4-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2156-59-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2164-58-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2252-18-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2252-87-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2284-30-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2376-71-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2388-66-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2508-63-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2508-6-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2612-92-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2700-34-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2840-68-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2964-53-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2964-0-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3068-10-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3068-72-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3132-8-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3132-67-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3224-12-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3224-76-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3244-23-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3352-50-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3456-70-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3508-57-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3508-3-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3544-88-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3544-19-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3596-49-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3684-40-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3820-24-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/3948-46-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4012-73-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4068-64-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4260-43-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4264-9-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4264-69-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4272-28-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4312-48-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4344-36-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4348-31-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4360-52-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4488-32-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4588-11-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4588-74-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4608-27-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4612-75-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4644-17-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4644-85-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4736-25-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4780-35-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4792-51-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4796-39-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4952-80-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4952-14-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4976-47-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4980-22-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/4980-94-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/5220-79-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/5236-81-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/5304-84-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/5344-86-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/5488-93-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/5504-95-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/17132-274-0x0000000074E50000-0x00000000750D4000-memory.dmp

Filesize
2.5MB

Download
memory/17148-273-0x0000000074E50000-0x00000000750D4000-memory.dmp

Filesize
2.5MB

Download
memory/17164-272-0x0000000074E50000-0x00000000750D4000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads