f6773dadf5223a4f1ff4fbc69bcf749922edc8bb4a15d5a5ad3703f368b02c93

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 14:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll
Size

93KB
MD5

06ee33bf468bfd55894cae7e39995d43
SHA1

28d48c9f9bf7e79e6d5bf4226eb508b7df822cab
SHA256

f6773dadf5223a4f1ff4fbc69bcf749922edc8bb4a15d5a5ad3703f368b02c93
SHA512

22109978304f3380f30dc29592dd344a7c61e94349b7bff4cd2f7e18b49f4d8f4a50600bb3551d07d1e8f97f54fd88c024977d01e5233949667266f9a539fab8
SSDEEP

1536:nBvrdvgpmvJTyc4EjuqkzYi1gt5hXl76K2UAVvozeFZjZ5MOPHDOwa+R/:X4mvJTyc46MAhXlmK2UAMeFZjvMOPHD/

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 652	5104	rundll32.exe	90
PID 5104 wrote to memory of 652	5104	rundll32.exe	90
PID 5104 wrote to memory of 652	5104	rundll32.exe	90
PID 652 wrote to memory of 1448	652	rundll32.exe	91
PID 652 wrote to memory of 1448	652	rundll32.exe	91
PID 652 wrote to memory of 1448	652	rundll32.exe	91
PID 1448 wrote to memory of 3292	1448	rundll32.exe	92
PID 1448 wrote to memory of 3292	1448	rundll32.exe	92
PID 1448 wrote to memory of 3292	1448	rundll32.exe	92
PID 3292 wrote to memory of 640	3292	rundll32.exe	93
PID 3292 wrote to memory of 640	3292	rundll32.exe	93
PID 3292 wrote to memory of 640	3292	rundll32.exe	93
PID 640 wrote to memory of 3192	640	rundll32.exe	94
PID 640 wrote to memory of 3192	640	rundll32.exe	94
PID 640 wrote to memory of 3192	640	rundll32.exe	94
PID 3192 wrote to memory of 3284	3192	rundll32.exe	95
PID 3192 wrote to memory of 3284	3192	rundll32.exe	95
PID 3192 wrote to memory of 3284	3192	rundll32.exe	95
PID 3284 wrote to memory of 3108	3284	rundll32.exe	96
PID 3284 wrote to memory of 3108	3284	rundll32.exe	96
PID 3284 wrote to memory of 3108	3284	rundll32.exe	96
PID 3108 wrote to memory of 1104	3108	rundll32.exe	97
PID 3108 wrote to memory of 1104	3108	rundll32.exe	97
PID 3108 wrote to memory of 1104	3108	rundll32.exe	97
PID 1104 wrote to memory of 676	1104	rundll32.exe	98
PID 1104 wrote to memory of 676	1104	rundll32.exe	98
PID 1104 wrote to memory of 676	1104	rundll32.exe	98
PID 676 wrote to memory of 3836	676	rundll32.exe	99
PID 676 wrote to memory of 3836	676	rundll32.exe	99
PID 676 wrote to memory of 3836	676	rundll32.exe	99
PID 3836 wrote to memory of 1064	3836	rundll32.exe	100
PID 3836 wrote to memory of 1064	3836	rundll32.exe	100
PID 3836 wrote to memory of 1064	3836	rundll32.exe	100
PID 1064 wrote to memory of 4416	1064	rundll32.exe	101
PID 1064 wrote to memory of 4416	1064	rundll32.exe	101
PID 1064 wrote to memory of 4416	1064	rundll32.exe	101
PID 4416 wrote to memory of 4684	4416	rundll32.exe	102
PID 4416 wrote to memory of 4684	4416	rundll32.exe	102
PID 4416 wrote to memory of 4684	4416	rundll32.exe	102
PID 4684 wrote to memory of 2144	4684	rundll32.exe	103
PID 4684 wrote to memory of 2144	4684	rundll32.exe	103
PID 4684 wrote to memory of 2144	4684	rundll32.exe	103
PID 2144 wrote to memory of 4216	2144	rundll32.exe	104
PID 2144 wrote to memory of 4216	2144	rundll32.exe	104
PID 2144 wrote to memory of 4216	2144	rundll32.exe	104
PID 4216 wrote to memory of 2356	4216	rundll32.exe	105
PID 4216 wrote to memory of 2356	4216	rundll32.exe	105
PID 4216 wrote to memory of 2356	4216	rundll32.exe	105
PID 2356 wrote to memory of 3952	2356	rundll32.exe	106
PID 2356 wrote to memory of 3952	2356	rundll32.exe	106
PID 2356 wrote to memory of 3952	2356	rundll32.exe	106
PID 3952 wrote to memory of 4128	3952	rundll32.exe	107
PID 3952 wrote to memory of 4128	3952	rundll32.exe	107
PID 3952 wrote to memory of 4128	3952	rundll32.exe	107
PID 4128 wrote to memory of 3232	4128	rundll32.exe	108
PID 4128 wrote to memory of 3232	4128	rundll32.exe	108
PID 4128 wrote to memory of 3232	4128	rundll32.exe	108
PID 3232 wrote to memory of 2912	3232	rundll32.exe	109
PID 3232 wrote to memory of 2912	3232	rundll32.exe	109
PID 3232 wrote to memory of 2912	3232	rundll32.exe	109
PID 2912 wrote to memory of 2932	2912	rundll32.exe	110
PID 2912 wrote to memory of 2932	2912	rundll32.exe	110
PID 2912 wrote to memory of 2932	2912	rundll32.exe	110
PID 2932 wrote to memory of 1724	2932	rundll32.exe	111

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:652
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1448
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3292
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:640
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:1064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:4216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:2932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        23⤵
        
        PID:1724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        24⤵
        
        PID:456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        25⤵
        
        PID:3616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        26⤵
        
        PID:4132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        27⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        28⤵
        
        PID:664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        29⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        30⤵
        
        PID:2952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        31⤵
        
        PID:3612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        32⤵
        
        PID:2100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        33⤵
        
        PID:4632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        34⤵
        
        PID:3792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        35⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        36⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        37⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        38⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        39⤵
        
        PID:1300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        40⤵
        
        PID:776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        41⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        42⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        43⤵
        
        PID:2940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        44⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        45⤵
        
        PID:4548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        46⤵
        
        PID:5012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        47⤵
        
        PID:1432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        48⤵
        
        PID:3568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        49⤵
        
        PID:4964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        50⤵
        
        PID:2460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        51⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        52⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        53⤵
        
        PID:1408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        54⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        55⤵
        
        PID:2252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        56⤵
        
        PID:720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        57⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        58⤵
        
        PID:3080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        59⤵
        
        PID:872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        60⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        61⤵
        
        PID:3356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        62⤵
        
        PID:3376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        63⤵
        
        PID:4876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        64⤵
        
        PID:4608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        65⤵
        
        PID:232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        66⤵
        
        PID:3556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        67⤵
        
        PID:3412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        68⤵
        
        PID:4004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        69⤵
        
        PID:1244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        70⤵
        
        PID:4528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        71⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        72⤵
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        73⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        74⤵
        
        PID:972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        75⤵
        
        PID:740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        76⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        77⤵
        
        PID:3012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        78⤵
        
        PID:4312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        79⤵
        
        PID:3052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        80⤵
        
        PID:4228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        81⤵
        
        PID:4960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        82⤵
        
        PID:388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        83⤵
        
        PID:4696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        84⤵
        
        PID:2412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        85⤵
        
        PID:436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        86⤵
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        87⤵
        
        PID:3276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        88⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        89⤵
        
        PID:3916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        90⤵
        
        PID:2880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        91⤵
        
        PID:2172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        92⤵
        
        PID:1212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        93⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        94⤵
        
        PID:1072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        95⤵
        
        PID:1292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        96⤵
        
        PID:2560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        97⤵
        
        PID:3224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        98⤵
        
        PID:3252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        99⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        100⤵
        
        PID:5132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        101⤵
        
        PID:5148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        102⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        103⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        104⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        105⤵
        
        PID:5204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        106⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        107⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        108⤵
        
        PID:5248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        109⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        110⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        111⤵
        
        PID:5288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        112⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        113⤵
        
        PID:5312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        114⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        115⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        116⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        117⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        118⤵
        
        PID:5376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        119⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        120⤵
        
        PID:5400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        121⤵
        
        PID:5416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        122⤵
        
        PID:5428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        123⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        124⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        125⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        126⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        127⤵
        
        PID:5492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        128⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        129⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        130⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        131⤵
        
        PID:5556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        132⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        133⤵
        
        PID:5584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        134⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        135⤵
        
        PID:5616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        136⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        137⤵
        
        PID:5644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        138⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        139⤵
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        140⤵
        
        PID:5696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        141⤵
        
        PID:5708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        142⤵
        
        PID:5724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        143⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        144⤵
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        145⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        146⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        147⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        148⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        149⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        150⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        151⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        152⤵
        
        PID:5884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        153⤵
        
        PID:5896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        154⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        155⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        156⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        157⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        158⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        159⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        160⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        161⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        162⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        163⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        164⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        165⤵
        
        PID:6116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        166⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        167⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        168⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        169⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        170⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        171⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        172⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        173⤵
        
        PID:6228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        174⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        175⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        176⤵
        
        PID:6268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        177⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        178⤵
        
        PID:6296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        179⤵
        
        PID:6312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        180⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        181⤵
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        182⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        183⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        184⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        185⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        186⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        187⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        188⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        189⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        190⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        191⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        192⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        193⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        194⤵
        
        PID:6528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        195⤵
        
        PID:6544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        196⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        197⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        198⤵
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        199⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        200⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        201⤵
        
        PID:6696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        202⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        203⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        204⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        205⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        206⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        207⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        208⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        209⤵
        
        PID:6892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        210⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        211⤵
        
        PID:6932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        212⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        213⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        214⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        215⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        216⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        217⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        218⤵
        
        PID:7048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        219⤵
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        220⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        221⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        222⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        223⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        224⤵
        
        PID:7136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        225⤵
        
        PID:7160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        226⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        227⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        228⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        229⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        230⤵
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        231⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        232⤵
        
        PID:7276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        233⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        234⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        235⤵
        
        PID:7316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        236⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        237⤵
        
        PID:7340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        238⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        239⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        240⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        241⤵
        
        PID:7416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        242⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        243⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        244⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        245⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        246⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        247⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        248⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        249⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        250⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        251⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        252⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        253⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        254⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        255⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        256⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        257⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        258⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        259⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        260⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        261⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        262⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        263⤵
        
        PID:7752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        264⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        265⤵
        
        PID:7776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        266⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        267⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        268⤵
        
        PID:7812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        269⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        270⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        271⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        272⤵
        
        PID:7868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        273⤵
        
        PID:7880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        274⤵
        
        PID:7900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        275⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        276⤵
        
        PID:7936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        277⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        278⤵
        
        PID:7964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        279⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        280⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        281⤵
        
        PID:8000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        282⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        283⤵
        
        PID:8028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        284⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        285⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        286⤵
        
        PID:8092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        287⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        288⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        289⤵
        
        PID:8168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        290⤵
        
        PID:8188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        291⤵
        
        PID:2192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        292⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        293⤵
        
        PID:8208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        294⤵
        
        PID:8228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        295⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        296⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        297⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        298⤵
        
        PID:8336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        299⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        300⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        301⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        302⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        303⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        304⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        305⤵
        
        PID:8452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        306⤵
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        307⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        308⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        309⤵
        
        PID:8512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        310⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        311⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        312⤵
        
        PID:8568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        313⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        314⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        315⤵
        
        PID:8612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        316⤵
        
        PID:8624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        317⤵
        
        PID:8640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        318⤵
        
        PID:8656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        319⤵
        
        PID:8668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        320⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        321⤵
        
        PID:8696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        322⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        323⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        324⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        325⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        326⤵
        
        PID:8768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        327⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        328⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        329⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        330⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        331⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        332⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        333⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        334⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        335⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        336⤵
        
        PID:8924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        337⤵
        
        PID:8940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        338⤵
        
        PID:8952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        339⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        340⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        341⤵
        
        PID:9000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        342⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        343⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        344⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        345⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        346⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        347⤵
        
        PID:9104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        348⤵
        
        PID:9116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        349⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        350⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        351⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        352⤵
        
        PID:9188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        353⤵
        
        PID:9200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        354⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        355⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        356⤵
        
        PID:5928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        357⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        358⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        359⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        360⤵
        
        PID:8760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        361⤵
        
        PID:9224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        362⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        363⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        364⤵
        
        PID:9272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        365⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        366⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        367⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        368⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        369⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        370⤵
        
        PID:9416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        371⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        372⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        373⤵
        
        PID:9468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        374⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        375⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        376⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        377⤵
        
        PID:9520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        378⤵
        
        PID:9532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        379⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        380⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        381⤵
        
        PID:9576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        382⤵
        
        PID:9588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        383⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        384⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        385⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        386⤵
        
        PID:9636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        387⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        388⤵
        
        PID:9668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        389⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        390⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        391⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        392⤵
        
        PID:9732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        393⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        394⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        395⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        396⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        397⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        398⤵
        
        PID:9828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        399⤵
        
        PID:9840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        400⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        401⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        402⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        403⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        404⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        405⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        406⤵
        
        PID:9932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        407⤵
        
        PID:9944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        408⤵
        
        PID:9960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        409⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        410⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        411⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        412⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        413⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        414⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        415⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        416⤵
        
        PID:10092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        417⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        418⤵
        
        PID:10124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        419⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        420⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        421⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        422⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        423⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        424⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        425⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        426⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        427⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        428⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        429⤵
        
        PID:9372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        430⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        431⤵
        
        PID:2348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        432⤵
        
        PID:4848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        433⤵
        
        PID:1280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        434⤵
        
        PID:5008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        435⤵
        
        PID:4020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        436⤵
        
        PID:3580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        437⤵
        
        PID:2908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        438⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        439⤵
        
        PID:944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        440⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        441⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        442⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        443⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        444⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        445⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        446⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        447⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        448⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        449⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        450⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        451⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        452⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        453⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        454⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        455⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        456⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        457⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        458⤵
        
        PID:10536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        459⤵
        
        PID:10556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        460⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        461⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        462⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        463⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        464⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        465⤵
        
        PID:10648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        466⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        467⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        468⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        469⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        470⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        471⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        472⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        473⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        474⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        475⤵
        
        PID:10784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        476⤵
        
        PID:10796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        477⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        478⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        479⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        480⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        481⤵
        
        PID:10860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        482⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        483⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        484⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        485⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        486⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        487⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        488⤵
        
        PID:10952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        489⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        490⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        491⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        492⤵
        
        PID:11004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        493⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        494⤵
        
        PID:11028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        495⤵
        
        PID:11040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        496⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        497⤵
        
        PID:11064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        498⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        499⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        500⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        501⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        502⤵
        
        PID:11140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        503⤵
        
        PID:11156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        504⤵
        
        PID:11172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        505⤵
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        506⤵
        
        PID:11200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        507⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        508⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        509⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        510⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        511⤵
        
        PID:11260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        512⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        513⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        514⤵
        
        PID:9380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        515⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        516⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        517⤵
        
        PID:2548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        518⤵
        
        PID:396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        519⤵
        
        PID:3852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        520⤵
        
        PID:3588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        521⤵
        
        PID:3360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        522⤵
        
        PID:3972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        523⤵
        
        PID:2488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        524⤵
        
        PID:10416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        525⤵
        
        PID:2604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        526⤵
        
        PID:2044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        527⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        528⤵
        
        PID:2440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        529⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        530⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        531⤵
        
        PID:3752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        532⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        533⤵
        
        PID:3560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        534⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        535⤵
        
        PID:3460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        536⤵
        
        PID:4600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        537⤵
        
        PID:2708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        538⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        539⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        540⤵
        
        PID:348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        541⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        542⤵
        
        PID:4308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        543⤵
        
        PID:1844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        544⤵
        
        PID:3620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        545⤵
        
        PID:1412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        546⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        547⤵
        
        PID:1484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        548⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        549⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        550⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        551⤵
        
        PID:5216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        552⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        553⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        554⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        555⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        556⤵
        
        PID:5384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        557⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        558⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        559⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        560⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        561⤵
        
        PID:5568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        562⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        563⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        564⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        565⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        566⤵
        
        PID:5692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        567⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        568⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        569⤵
        
        PID:5776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        570⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        571⤵
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        572⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        573⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        574⤵
        
        PID:11292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        575⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        576⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        577⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        578⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        579⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        580⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        581⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        582⤵
        
        PID:11392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        583⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        584⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        585⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        586⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        587⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        588⤵
        
        PID:11472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        589⤵
        
        PID:11484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        590⤵
        
        PID:11496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        591⤵
        
        PID:11508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        592⤵
        
        PID:11528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        593⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        594⤵
        
        PID:11556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        595⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        596⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        597⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        598⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        599⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        600⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        601⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        602⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        603⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        604⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        605⤵
        
        PID:11712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        606⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        607⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        608⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        609⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        610⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        611⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        612⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        613⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        614⤵
        
        PID:11852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        615⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        616⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        617⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        618⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        619⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        620⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        621⤵
        
        PID:11972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        622⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        623⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        624⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        625⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        626⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        627⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        628⤵
        
        PID:12056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        629⤵
        
        PID:12072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        630⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        631⤵
        
        PID:12096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        632⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        633⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        634⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        635⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        636⤵
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        637⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        638⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        639⤵
        
        PID:12216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        640⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        641⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        642⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        643⤵
        
        PID:12264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        644⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        645⤵
        
        PID:5864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        646⤵
        
        PID:5876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        647⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        648⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        649⤵
        
        PID:6016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        650⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        651⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        652⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        653⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        654⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        655⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        656⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        657⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        658⤵
        
        PID:60
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        659⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        660⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        661⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        662⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        663⤵
        
        PID:6376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        664⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        665⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        666⤵
        
        PID:6480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        667⤵
        
        PID:6508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        668⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        669⤵
        
        PID:6636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        670⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        671⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        672⤵
        
        PID:6828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        673⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        674⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        675⤵
        
        PID:6904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        676⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        677⤵
        
        PID:7000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        678⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        679⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        680⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        681⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        682⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        683⤵
        
        PID:7144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        684⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        685⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        686⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        687⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        688⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        689⤵
        
        PID:7372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        690⤵
        
        PID:432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        691⤵
        
        PID:7480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        692⤵
        
        PID:7508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        693⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        694⤵
        
        PID:7568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        695⤵
        
        PID:6784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        696⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        697⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        698⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        699⤵
        
        PID:1836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        700⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        701⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        702⤵
        
        PID:4412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        703⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        704⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        705⤵
        
        PID:7836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        706⤵
        
        PID:7400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        707⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        708⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        709⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        710⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        711⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        712⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        713⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        714⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        715⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        716⤵
        
        PID:12400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        717⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        718⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        719⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        720⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        721⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        722⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        723⤵
        
        PID:12488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        724⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        725⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        726⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        727⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        728⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        729⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        730⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        731⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        732⤵
        
        PID:12604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        733⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        734⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        735⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        736⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        737⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        738⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        739⤵
        
        PID:12708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        740⤵
        
        PID:12724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        741⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        742⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        743⤵
        
        PID:12760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        744⤵
        
        PID:12772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        745⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        746⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        747⤵
        
        PID:12812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        748⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        749⤵
        
        PID:12844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        750⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        751⤵
        
        PID:12868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        752⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        753⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        754⤵
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        755⤵
        
        PID:12916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        756⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        757⤵
        
        PID:12940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        758⤵
        
        PID:12952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        759⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        760⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        761⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        762⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        763⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        764⤵
        
        PID:13036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        765⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        766⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        767⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        768⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        769⤵
        
        PID:13100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        770⤵
        
        PID:13112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        771⤵
        
        PID:13124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        772⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        773⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        774⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        775⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        776⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        777⤵
        
        PID:13196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        778⤵
        
        PID:13212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        779⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        780⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        781⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        782⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        783⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        784⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        785⤵
        
        PID:13300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        786⤵
        
        PID:1624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        787⤵
        
        PID:7948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        788⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        789⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        790⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        791⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        792⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        793⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        794⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        795⤵
        
        PID:3152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        796⤵
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        797⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        798⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        799⤵
        
        PID:8376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        800⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        801⤵
        
        PID:8432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        802⤵
        
        PID:12548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        803⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        804⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        805⤵
        
        PID:8528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        806⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        807⤵
        
        PID:8580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        808⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        809⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        810⤵
        
        PID:8680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        811⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        812⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        813⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        814⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        815⤵
        
        PID:8860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        816⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        817⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        818⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        819⤵
        
        PID:8964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        820⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        821⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        822⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        823⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        824⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        825⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        826⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        827⤵
        
        PID:3536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        828⤵
        
        PID:5944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        829⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        830⤵
        
        PID:8744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        831⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        832⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        833⤵
        
        PID:9308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        834⤵
        
        PID:9324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        835⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        836⤵
        
        PID:9400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        837⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        838⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        839⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        840⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        841⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        842⤵
        
        PID:9608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        843⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        844⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        845⤵
        
        PID:9712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        846⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        847⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        848⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        849⤵
        
        PID:13328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        850⤵
        
        PID:13340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        851⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        852⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        853⤵
        
        PID:13376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        854⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        855⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        856⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        857⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        858⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        859⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        860⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        861⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        862⤵
        
        PID:13488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        863⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        864⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        865⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        866⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        867⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        868⤵
        
        PID:13572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        869⤵
        
        PID:13588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        870⤵
        
        PID:13600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        871⤵
        
        PID:13612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        872⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        873⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        874⤵
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        875⤵
        
        PID:13660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        876⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        877⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        878⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        879⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        880⤵
        
        PID:13724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        881⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        882⤵
        
        PID:13752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        883⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        884⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06ee33bf468bfd55894cae7e39995d43_JaffaCakes118.dll,#1
        885⤵
        
        PID:13796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4124 --field-trial-handle=1928,i,13242902252791919845,10377620236057253993,262144 --variations-seed-version /prefetch:8
1⤵
PID:11788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1448-0-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download
memory/3292-1-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download
memory/13688-32-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download
memory/13700-31-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download
memory/13712-30-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download
memory/13724-29-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download
memory/13736-28-0x0000000075560000-0x00000000757E4000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads