831561b30500433d71966ad3badbb37c679d9a7873d744a3260f2d3746dc9380

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/06/2024, 00:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll
Size

97KB
MD5

180b43f4225dbd427a41787bcf54e605
SHA1

9a57f12b39db8d5cba546e62ae2ce859851741e8
SHA256

831561b30500433d71966ad3badbb37c679d9a7873d744a3260f2d3746dc9380
SHA512

507c40515a5a7a9a83713e51b1f24773a2c92cfc624ab4db56a96104e1fcfc461d0d3313199c64c348bcff28d0de915b75ca5bd192718cbfa442d5140d8b8722
SSDEEP

1536:doqqmWMziXV8Kq23Jo41wpMb5PmlYfww7mFjCGy/SAb2tF+Wnd5h+:SqqmW+23JbIFifww7a9uStF+y5I

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 4556	4384	rundll32.exe	80
PID 4384 wrote to memory of 4556	4384	rundll32.exe	80
PID 4384 wrote to memory of 4556	4384	rundll32.exe	80
PID 4556 wrote to memory of 1284	4556	rundll32.exe	81
PID 4556 wrote to memory of 1284	4556	rundll32.exe	81
PID 4556 wrote to memory of 1284	4556	rundll32.exe	81
PID 1284 wrote to memory of 716	1284	rundll32.exe	82
PID 1284 wrote to memory of 716	1284	rundll32.exe	82
PID 1284 wrote to memory of 716	1284	rundll32.exe	82
PID 716 wrote to memory of 4612	716	rundll32.exe	83
PID 716 wrote to memory of 4612	716	rundll32.exe	83
PID 716 wrote to memory of 4612	716	rundll32.exe	83
PID 4612 wrote to memory of 3732	4612	rundll32.exe	84
PID 4612 wrote to memory of 3732	4612	rundll32.exe	84
PID 4612 wrote to memory of 3732	4612	rundll32.exe	84
PID 3732 wrote to memory of 5108	3732	rundll32.exe	85
PID 3732 wrote to memory of 5108	3732	rundll32.exe	85
PID 3732 wrote to memory of 5108	3732	rundll32.exe	85
PID 5108 wrote to memory of 4616	5108	rundll32.exe	86
PID 5108 wrote to memory of 4616	5108	rundll32.exe	86
PID 5108 wrote to memory of 4616	5108	rundll32.exe	86
PID 4616 wrote to memory of 4472	4616	rundll32.exe	87
PID 4616 wrote to memory of 4472	4616	rundll32.exe	87
PID 4616 wrote to memory of 4472	4616	rundll32.exe	87
PID 4472 wrote to memory of 4860	4472	rundll32.exe	88
PID 4472 wrote to memory of 4860	4472	rundll32.exe	88
PID 4472 wrote to memory of 4860	4472	rundll32.exe	88
PID 4860 wrote to memory of 1208	4860	rundll32.exe	89
PID 4860 wrote to memory of 1208	4860	rundll32.exe	89
PID 4860 wrote to memory of 1208	4860	rundll32.exe	89
PID 1208 wrote to memory of 3444	1208	rundll32.exe	90
PID 1208 wrote to memory of 3444	1208	rundll32.exe	90
PID 1208 wrote to memory of 3444	1208	rundll32.exe	90
PID 3444 wrote to memory of 3196	3444	rundll32.exe	91
PID 3444 wrote to memory of 3196	3444	rundll32.exe	91
PID 3444 wrote to memory of 3196	3444	rundll32.exe	91
PID 3196 wrote to memory of 2876	3196	rundll32.exe	92
PID 3196 wrote to memory of 2876	3196	rundll32.exe	92
PID 3196 wrote to memory of 2876	3196	rundll32.exe	92
PID 2876 wrote to memory of 4852	2876	rundll32.exe	93
PID 2876 wrote to memory of 4852	2876	rundll32.exe	93
PID 2876 wrote to memory of 4852	2876	rundll32.exe	93
PID 4852 wrote to memory of 1836	4852	rundll32.exe	94
PID 4852 wrote to memory of 1836	4852	rundll32.exe	94
PID 4852 wrote to memory of 1836	4852	rundll32.exe	94
PID 1836 wrote to memory of 5020	1836	rundll32.exe	95
PID 1836 wrote to memory of 5020	1836	rundll32.exe	95
PID 1836 wrote to memory of 5020	1836	rundll32.exe	95
PID 5020 wrote to memory of 3492	5020	rundll32.exe	96
PID 5020 wrote to memory of 3492	5020	rundll32.exe	96
PID 5020 wrote to memory of 3492	5020	rundll32.exe	96
PID 3492 wrote to memory of 3912	3492	rundll32.exe	97
PID 3492 wrote to memory of 3912	3492	rundll32.exe	97
PID 3492 wrote to memory of 3912	3492	rundll32.exe	97
PID 3912 wrote to memory of 3016	3912	rundll32.exe	98
PID 3912 wrote to memory of 3016	3912	rundll32.exe	98
PID 3912 wrote to memory of 3016	3912	rundll32.exe	98
PID 3016 wrote to memory of 2044	3016	rundll32.exe	99
PID 3016 wrote to memory of 2044	3016	rundll32.exe	99
PID 3016 wrote to memory of 2044	3016	rundll32.exe	99
PID 2044 wrote to memory of 4632	2044	rundll32.exe	100
PID 2044 wrote to memory of 4632	2044	rundll32.exe	100
PID 2044 wrote to memory of 4632	2044	rundll32.exe	100
PID 4632 wrote to memory of 1488	4632	rundll32.exe	101

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4556
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1284
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:716
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4612
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:1208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:4852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:3912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        23⤵
        
        PID:1488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        24⤵
        
        PID:1340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        25⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        26⤵
        
        PID:3560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        27⤵
        
        PID:4844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        28⤵
        
        PID:3224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        29⤵
        
        PID:2528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        30⤵
        
        PID:1280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        31⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        32⤵
        
        PID:2684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        33⤵
        
        PID:2652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        34⤵
        
        PID:368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        35⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        36⤵
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        37⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        38⤵
        
        PID:1392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        39⤵
        
        PID:1236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        40⤵
        
        PID:1216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        41⤵
        
        PID:4544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        42⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        43⤵
        
        PID:4416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        44⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        45⤵
        
        PID:4412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        46⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        47⤵
        
        PID:4988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        48⤵
        
        PID:3160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        49⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        50⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        51⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        52⤵
        
        PID:2564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        53⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        54⤵
        
        PID:4252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        55⤵
        
        PID:1388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        56⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        57⤵
        
        PID:2816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        58⤵
        
        PID:4372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        59⤵
        
        PID:372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        60⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        61⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        62⤵
        
        PID:3296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        63⤵
        
        PID:3100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        64⤵
        
        PID:3904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        65⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        66⤵
        
        PID:2068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        67⤵
        
        PID:920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        68⤵
        
        PID:4980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        69⤵
        
        PID:3872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        70⤵
        
        PID:4488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        71⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        72⤵
        
        PID:2952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        73⤵
        
        PID:2596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        74⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        75⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        76⤵
        
        PID:2056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        77⤵
        
        PID:2508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        78⤵
        
        PID:3036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        79⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        80⤵
        
        PID:1564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        81⤵
        
        PID:4304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        82⤵
        
        PID:804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        83⤵
        
        PID:2556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        84⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        85⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        86⤵
        
        PID:880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        87⤵
        
        PID:1016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        88⤵
        
        PID:1060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        89⤵
        
        PID:1200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        90⤵
        
        PID:4232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        91⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        92⤵
        
        PID:1652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        93⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        94⤵
        
        PID:2212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        95⤵
        
        PID:3976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        96⤵
        
        PID:1004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        97⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        98⤵
        
        PID:4908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        99⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        100⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        101⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        102⤵
        
        PID:1800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        103⤵
        
        PID:424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        104⤵
        
        PID:3688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        105⤵
        
        PID:3684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        106⤵
        
        PID:2784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        107⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        108⤵
        
        PID:4924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        109⤵
        
        PID:5004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        110⤵
        
        PID:1888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        111⤵
        
        PID:4912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        112⤵
        
        PID:4796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        113⤵
        
        PID:2672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        114⤵
        
        PID:4540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        115⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        116⤵
        
        PID:3104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        117⤵
        
        PID:996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        118⤵
        
        PID:3556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        119⤵
        
        PID:4440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        120⤵
        
        PID:664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        121⤵
        
        PID:832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        122⤵
        
        PID:3088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        123⤵
        
        PID:3700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        124⤵
        
        PID:4176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        125⤵
        
        PID:4000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        126⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        127⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        128⤵
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        129⤵
        
        PID:4292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        130⤵
        
        PID:2552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        131⤵
        
        PID:4644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        132⤵
        
        PID:5052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        133⤵
        
        PID:2004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        134⤵
        
        PID:5060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        135⤵
        
        PID:4116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        136⤵
        
        PID:2756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        137⤵
        
        PID:5136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        138⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        139⤵
        
        PID:5164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        140⤵
        
        PID:5180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        141⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        142⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        143⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        144⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        145⤵
        
        PID:5252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        146⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        147⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        148⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        149⤵
        
        PID:5304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        150⤵
        
        PID:5320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        151⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        152⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        153⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        154⤵
        
        PID:5384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        155⤵
        
        PID:5400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        156⤵
        
        PID:5416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        157⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        158⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        159⤵
        
        PID:5460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        160⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        161⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        162⤵
        
        PID:5504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        163⤵
        
        PID:5520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        164⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        165⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        166⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        167⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        168⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        169⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        170⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        171⤵
        
        PID:5628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        172⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        173⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        174⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        175⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        176⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        177⤵
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        178⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        179⤵
        
        PID:5748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        180⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        181⤵
        
        PID:5776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        182⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        183⤵
        
        PID:5804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        184⤵
        
        PID:5820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        185⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        186⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        187⤵
        
        PID:5864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        188⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        189⤵
        
        PID:5896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        190⤵
        
        PID:5908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        191⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        192⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        193⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        194⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        195⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        196⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        197⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        198⤵
        
        PID:6028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        199⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        200⤵
        
        PID:6056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        201⤵
        
        PID:6072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        202⤵
        
        PID:6088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        203⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        204⤵
        
        PID:6116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        205⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        206⤵
        
        PID:3916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        207⤵
        
        PID:6156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        208⤵
        
        PID:6168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        209⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        210⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        211⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        212⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        213⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        214⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        215⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        216⤵
        
        PID:6296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        217⤵
        
        PID:6312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        218⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        219⤵
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        220⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        221⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        222⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        223⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        224⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        225⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        226⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        227⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        228⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        229⤵
        
        PID:6476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        230⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        231⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        232⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        233⤵
        
        PID:6528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        234⤵
        
        PID:6540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        235⤵
        
        PID:6556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        236⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        237⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        238⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        239⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        240⤵
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        241⤵
        
        PID:6636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        242⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        243⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        244⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        245⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        246⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        247⤵
        
        PID:6724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        248⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        249⤵
        
        PID:6756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        250⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        251⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        252⤵
        
        PID:6800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        253⤵
        
        PID:6816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        254⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        255⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        256⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        257⤵
        
        PID:6880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        258⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        259⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        260⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        261⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        262⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        263⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        264⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        265⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        266⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        267⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        268⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        269⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        270⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        271⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        272⤵
        
        PID:7096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        273⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        274⤵
        
        PID:7128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        275⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        276⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        277⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        278⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        279⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        280⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        281⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        282⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        283⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        284⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        285⤵
        
        PID:7288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        286⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        287⤵
        
        PID:7320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        288⤵
        
        PID:7336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        289⤵
        
        PID:7348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        290⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        291⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        292⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        293⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        294⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        295⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        296⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        297⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        298⤵
        
        PID:7480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        299⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        300⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        301⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        302⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        303⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        304⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        305⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        306⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        307⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        308⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        309⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        310⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        311⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        312⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        313⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        314⤵
        
        PID:7724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        315⤵
        
        PID:7740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        316⤵
        
        PID:7752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        317⤵
        
        PID:7768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        318⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        319⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        320⤵
        
        PID:7812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        321⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        322⤵
        
        PID:7836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        323⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        324⤵
        
        PID:7864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        325⤵
        
        PID:7880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        326⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        327⤵
        
        PID:7912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        328⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        329⤵
        
        PID:7936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        330⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        331⤵
        
        PID:7968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        332⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        333⤵
        
        PID:8000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        334⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        335⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        336⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        337⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        338⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        339⤵
        
        PID:8092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        340⤵
        
        PID:8108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        341⤵
        
        PID:8120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        342⤵
        
        PID:8136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        343⤵
        
        PID:8148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        344⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        345⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        346⤵
        
        PID:1272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        347⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        348⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        349⤵
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        350⤵
        
        PID:8240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        351⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        352⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        353⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        354⤵
        
        PID:8296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        355⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        356⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        357⤵
        
        PID:8336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        358⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        359⤵
        
        PID:8364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        360⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        361⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        362⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        363⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        364⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        365⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        366⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        367⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        368⤵
        
        PID:8512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        369⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        370⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        371⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        372⤵
        
        PID:8576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        373⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        374⤵
        
        PID:8612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        375⤵
        
        PID:8628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        376⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        377⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        378⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        379⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        380⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        381⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        382⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        383⤵
        
        PID:8768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        384⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        385⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        386⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        387⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        388⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        389⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        390⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        391⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        392⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        393⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        394⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        395⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        396⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        397⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        398⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        399⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        400⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        401⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        402⤵
        
        PID:9044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        403⤵
        
        PID:9060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        404⤵
        
        PID:9076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        405⤵
        
        PID:9092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        406⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        407⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        408⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        409⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        410⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        411⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        412⤵
        
        PID:9200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        413⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        414⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        415⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        416⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        417⤵
        
        PID:9284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        418⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        419⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        420⤵
        
        PID:9332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        421⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        422⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        423⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        424⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        425⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        426⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        427⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        428⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        429⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        430⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        431⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        432⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        433⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        434⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        435⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        436⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        437⤵
        
        PID:9576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        438⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        439⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        440⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        441⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        442⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        443⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        444⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        445⤵
        
        PID:9700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        446⤵
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        447⤵
        
        PID:9728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        448⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        449⤵
        
        PID:9764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        450⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        451⤵
        
        PID:9796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        452⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        453⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        454⤵
        
        PID:9840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        455⤵
        
        PID:9856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        456⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        457⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        458⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        459⤵
        
        PID:9916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        460⤵
        
        PID:9932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        461⤵
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        462⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        463⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        464⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        465⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        466⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        467⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        468⤵
        
        PID:10056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        469⤵
        
        PID:10072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        470⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        471⤵
        
        PID:10104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        472⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        473⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        474⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        475⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        476⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        477⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        478⤵
        
        PID:10212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        479⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        480⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        481⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        482⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        483⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        484⤵
        
        PID:10296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        485⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        486⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        487⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        488⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        489⤵
        
        PID:10368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        490⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        491⤵
        
        PID:10396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        492⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        493⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        494⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        495⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        496⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        497⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        498⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        499⤵
        
        PID:10516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        500⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        501⤵
        
        PID:10548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        502⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        503⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        504⤵
        
        PID:10596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        505⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        506⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        507⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        508⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        509⤵
        
        PID:10672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        510⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        511⤵
        
        PID:10704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        512⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        513⤵
        
        PID:10740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        514⤵
        
        PID:10752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        515⤵
        
        PID:10768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        516⤵
        
        PID:10784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        517⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        518⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        519⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        520⤵
        
        PID:10840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        521⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        522⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        523⤵
        
        PID:10892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        524⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        525⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        526⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        527⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        528⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        529⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        530⤵
        
        PID:11000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        531⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        532⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        533⤵
        
        PID:11048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        534⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        535⤵
        
        PID:11072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        536⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        537⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        538⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        539⤵
        
        PID:11136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        540⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        541⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        542⤵
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        543⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        544⤵
        
        PID:11208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        545⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        546⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        547⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        548⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        549⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        550⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        551⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        552⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        553⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        554⤵
        
        PID:11360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        555⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        556⤵
        
        PID:11388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        557⤵
        
        PID:11404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        558⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        559⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        560⤵
        
        PID:11452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        561⤵
        
        PID:11468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        562⤵
        
        PID:11484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        563⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        564⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        565⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        566⤵
        
        PID:11548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        567⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        568⤵
        
        PID:11572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        569⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        570⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        571⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        572⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        573⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        574⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        575⤵
        
        PID:11672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        576⤵
        
        PID:11684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        577⤵
        
        PID:11696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        578⤵
        
        PID:11712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        579⤵
        
        PID:11724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        580⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        581⤵
        
        PID:11752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        582⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        583⤵
        
        PID:11784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        584⤵
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        585⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        586⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        587⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        588⤵
        
        PID:11860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        589⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        590⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        591⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        592⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        593⤵
        
        PID:11936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        594⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        595⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        596⤵
        
        PID:11980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        597⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        598⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        599⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        600⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        601⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        602⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        603⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        604⤵
        
        PID:12096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        605⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        606⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        607⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        608⤵
        
        PID:12160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        609⤵
        
        PID:12176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        610⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        611⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        612⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        613⤵
        
        PID:12236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        614⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        615⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        616⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        617⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        618⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        619⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        620⤵
        
        PID:12332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        621⤵
        
        PID:12348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        622⤵
        
        PID:12364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        623⤵
        
        PID:12376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        624⤵
        
        PID:12392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        625⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        626⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        627⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        628⤵
        
        PID:12444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        629⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        630⤵
        
        PID:12472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        631⤵
        
        PID:12488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        632⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        633⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        634⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        635⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        636⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        637⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        638⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        639⤵
        
        PID:12604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        640⤵
        
        PID:12620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        641⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        642⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        643⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        644⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        645⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        646⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        647⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        648⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        649⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        650⤵
        
        PID:12776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        651⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        652⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        653⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        654⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        655⤵
        
        PID:12852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        656⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        657⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        658⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        659⤵
        
        PID:12908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        660⤵
        
        PID:12924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        661⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        662⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        663⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        664⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        665⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        666⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        667⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        668⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        669⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        670⤵
        
        PID:13068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        671⤵
        
        PID:13084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        672⤵
        
        PID:13096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        673⤵
        
        PID:13112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        674⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        675⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        676⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        677⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        678⤵
        
        PID:13188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        679⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        680⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        681⤵
        
        PID:13228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        682⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        683⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        684⤵
        
        PID:13268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        685⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        686⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        687⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        688⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        689⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        690⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        691⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        692⤵
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        693⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        694⤵
        
        PID:13404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        695⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        696⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        697⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        698⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        699⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        700⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        701⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        702⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        703⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        704⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        705⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        706⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        707⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        708⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        709⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        710⤵
        
        PID:13652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        711⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        712⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        713⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        714⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        715⤵
        
        PID:13728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        716⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        717⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        718⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        719⤵
        
        PID:13792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        720⤵
        
        PID:13804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        721⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        722⤵
        
        PID:13836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        723⤵
        
        PID:13848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        724⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        725⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        726⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        727⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        728⤵
        
        PID:13920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        729⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        730⤵
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        731⤵
        
        PID:13964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        732⤵
        
        PID:13980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        733⤵
        
        PID:13992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        734⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        735⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        736⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        737⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        738⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        739⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        740⤵
        
        PID:14096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        741⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        742⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        743⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        744⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        745⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        746⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        747⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        748⤵
        
        PID:14216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        749⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        750⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        751⤵
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        752⤵
        
        PID:14280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        753⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        754⤵
        
        PID:14312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        755⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        756⤵
        
        PID:3120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        757⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        758⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        759⤵
        
        PID:14368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        760⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        761⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        762⤵
        
        PID:14408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        763⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        764⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        765⤵
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        766⤵
        
        PID:14460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        767⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        768⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        769⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        770⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        771⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        772⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        773⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        774⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        775⤵
        
        PID:14588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        776⤵
        
        PID:14604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        777⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        778⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        779⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        780⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        781⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        782⤵
        
        PID:14692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        783⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        784⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        785⤵
        
        PID:14740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        786⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        787⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        788⤵
        
        PID:14788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        789⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        790⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        791⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        792⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        793⤵
        
        PID:14860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        794⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        795⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        796⤵
        
        PID:14904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        797⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        798⤵
        
        PID:14940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        799⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        800⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        801⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        802⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        803⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        804⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        805⤵
        
        PID:15048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        806⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        807⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        808⤵
        
        PID:15096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        809⤵
        
        PID:15112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        810⤵
        
        PID:15128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        811⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        812⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        813⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        814⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        815⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        816⤵
        
        PID:15224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        817⤵
        
        PID:15240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        818⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        819⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        820⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        821⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        822⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        823⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        824⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        825⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        826⤵
        
        PID:3568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        827⤵
        
        PID:1396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        828⤵
        
        PID:2520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        829⤵
        
        PID:408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        830⤵
        
        PID:15368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        831⤵
        
        PID:15384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        832⤵
        
        PID:15400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        833⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        834⤵
        
        PID:15432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        835⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        836⤵
        
        PID:15464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        837⤵
        
        PID:15480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        838⤵
        
        PID:15496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        839⤵
        
        PID:15512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        840⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        841⤵
        
        PID:15540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        842⤵
        
        PID:15556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        843⤵
        
        PID:15572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        844⤵
        
        PID:15588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        845⤵
        
        PID:15604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        846⤵
        
        PID:15616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        847⤵
        
        PID:15632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        848⤵
        
        PID:15648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        849⤵
        
        PID:15664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        850⤵
        
        PID:15680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        851⤵
        
        PID:15696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        852⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        853⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        854⤵
        
        PID:15744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        855⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        856⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        857⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        858⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        859⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        860⤵
        
        PID:15844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        861⤵
        
        PID:15860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        862⤵
        
        PID:15876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        863⤵
        
        PID:15892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        864⤵
        
        PID:15908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        865⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        866⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        867⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        868⤵
        
        PID:15972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        869⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        870⤵
        
        PID:16004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        871⤵
        
        PID:16020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        872⤵
        
        PID:16036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        873⤵
        
        PID:16052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        874⤵
        
        PID:16068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        875⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        876⤵
        
        PID:16100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        877⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        878⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        879⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        880⤵
        
        PID:16164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        881⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        882⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        883⤵
        
        PID:16212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        884⤵
        
        PID:16228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        885⤵
        
        PID:16240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        886⤵
        
        PID:16256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        887⤵
        
        PID:16272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        888⤵
        
        PID:16288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        889⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        890⤵
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        891⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        892⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        893⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        894⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        895⤵
        
        PID:15256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        896⤵
        
        PID:16396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        897⤵
        
        PID:16412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        898⤵
        
        PID:16428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        899⤵
        
        PID:16444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        900⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        901⤵
        
        PID:16476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        902⤵
        
        PID:16492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        903⤵
        
        PID:16508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\180b43f4225dbd427a41787bcf54e605_JaffaCakes118.dll,#1
        904⤵
        
        PID:16524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/16456-0-0x00000000759B0000-0x0000000075C34000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads