a7225d80fb20049a1cb2ccdbab239c7be895f0eb56ee7ffa42d6bb47727353b9

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 17:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll
Size

628KB
MD5

232a454ac21e514c999c623fcc178b5a
SHA1

4883be14f93bb7a886f1654a91f53a9881226ce6
SHA256

a7225d80fb20049a1cb2ccdbab239c7be895f0eb56ee7ffa42d6bb47727353b9
SHA512

b1379278819c83742ecee8cd381e3fbbd514824bf3739fcd08882a68b0391b5713da27a7c6aadff9909f5f79ccb219be763390b028c4ad4dbb1a4c8dd241c039
SSDEEP

12288:HflFLr0rqSkgM3ICXBHNvFQu0fTPC6b3PiFaob1gsiFbsePPTCvOnZvT9UI0TK99:/rHgk79CTPC6bfJPFbsePPTBBTeTe

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4484 wrote to memory of 3444	4484	rundll32.exe	82
PID 4484 wrote to memory of 3444	4484	rundll32.exe	82
PID 4484 wrote to memory of 3444	4484	rundll32.exe	82
PID 3444 wrote to memory of 716	3444	rundll32.exe	83
PID 3444 wrote to memory of 716	3444	rundll32.exe	83
PID 3444 wrote to memory of 716	3444	rundll32.exe	83
PID 716 wrote to memory of 232	716	rundll32.exe	84
PID 716 wrote to memory of 232	716	rundll32.exe	84
PID 716 wrote to memory of 232	716	rundll32.exe	84
PID 232 wrote to memory of 884	232	rundll32.exe	85
PID 232 wrote to memory of 884	232	rundll32.exe	85
PID 232 wrote to memory of 884	232	rundll32.exe	85
PID 884 wrote to memory of 2412	884	rundll32.exe	86
PID 884 wrote to memory of 2412	884	rundll32.exe	86
PID 884 wrote to memory of 2412	884	rundll32.exe	86
PID 2412 wrote to memory of 4336	2412	rundll32.exe	87
PID 2412 wrote to memory of 4336	2412	rundll32.exe	87
PID 2412 wrote to memory of 4336	2412	rundll32.exe	87
PID 4336 wrote to memory of 2464	4336	rundll32.exe	88
PID 4336 wrote to memory of 2464	4336	rundll32.exe	88
PID 4336 wrote to memory of 2464	4336	rundll32.exe	88
PID 2464 wrote to memory of 1104	2464	rundll32.exe	89
PID 2464 wrote to memory of 1104	2464	rundll32.exe	89
PID 2464 wrote to memory of 1104	2464	rundll32.exe	89
PID 1104 wrote to memory of 4252	1104	rundll32.exe	90
PID 1104 wrote to memory of 4252	1104	rundll32.exe	90
PID 1104 wrote to memory of 4252	1104	rundll32.exe	90
PID 4252 wrote to memory of 1652	4252	rundll32.exe	91
PID 4252 wrote to memory of 1652	4252	rundll32.exe	91
PID 4252 wrote to memory of 1652	4252	rundll32.exe	91
PID 1652 wrote to memory of 3108	1652	rundll32.exe	92
PID 1652 wrote to memory of 3108	1652	rundll32.exe	92
PID 1652 wrote to memory of 3108	1652	rundll32.exe	92
PID 3108 wrote to memory of 1580	3108	rundll32.exe	93
PID 3108 wrote to memory of 1580	3108	rundll32.exe	93
PID 3108 wrote to memory of 1580	3108	rundll32.exe	93
PID 1580 wrote to memory of 1388	1580	rundll32.exe	94
PID 1580 wrote to memory of 1388	1580	rundll32.exe	94
PID 1580 wrote to memory of 1388	1580	rundll32.exe	94
PID 1388 wrote to memory of 2600	1388	rundll32.exe	95
PID 1388 wrote to memory of 2600	1388	rundll32.exe	95
PID 1388 wrote to memory of 2600	1388	rundll32.exe	95
PID 2600 wrote to memory of 4700	2600	rundll32.exe	96
PID 2600 wrote to memory of 4700	2600	rundll32.exe	96
PID 2600 wrote to memory of 4700	2600	rundll32.exe	96
PID 4700 wrote to memory of 3024	4700	rundll32.exe	97
PID 4700 wrote to memory of 3024	4700	rundll32.exe	97
PID 4700 wrote to memory of 3024	4700	rundll32.exe	97
PID 3024 wrote to memory of 856	3024	rundll32.exe	98
PID 3024 wrote to memory of 856	3024	rundll32.exe	98
PID 3024 wrote to memory of 856	3024	rundll32.exe	98
PID 856 wrote to memory of 1128	856	rundll32.exe	99
PID 856 wrote to memory of 1128	856	rundll32.exe	99
PID 856 wrote to memory of 1128	856	rundll32.exe	99
PID 1128 wrote to memory of 116	1128	rundll32.exe	100
PID 1128 wrote to memory of 116	1128	rundll32.exe	100
PID 1128 wrote to memory of 116	1128	rundll32.exe	100
PID 116 wrote to memory of 1996	116	rundll32.exe	101
PID 116 wrote to memory of 1996	116	rundll32.exe	101
PID 116 wrote to memory of 1996	116	rundll32.exe	101
PID 1996 wrote to memory of 4044	1996	rundll32.exe	102
PID 1996 wrote to memory of 4044	1996	rundll32.exe	102
PID 1996 wrote to memory of 4044	1996	rundll32.exe	102
PID 4044 wrote to memory of 2488	4044	rundll32.exe	103

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4484
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3444
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:716
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:232
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:884
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:4336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:2464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:1652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:1388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:4700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:3024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:1996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        23⤵
        
        PID:2488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        24⤵
        
        PID:3976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        25⤵
        
        PID:4908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        26⤵
        
        PID:2696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        27⤵
        
        PID:2180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        28⤵
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        29⤵
        
        PID:2084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        30⤵
        
        PID:2068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        31⤵
        
        PID:3296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        32⤵
        
        PID:4492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        33⤵
        
        PID:2300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        34⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        35⤵
        
        PID:4656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        36⤵
        
        PID:5036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        37⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        38⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        39⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        40⤵
        
        PID:3692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        41⤵
        
        PID:4712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        42⤵
        
        PID:3020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        43⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        44⤵
        
        PID:4388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        45⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        46⤵
        
        PID:3048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        47⤵
        
        PID:1328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        48⤵
        
        PID:2372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        49⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        50⤵
        
        PID:1984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        51⤵
        
        PID:3044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        52⤵
        
        PID:2900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        53⤵
        
        PID:4804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        54⤵
        
        PID:376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        55⤵
        
        PID:5012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        56⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        57⤵
        
        PID:2648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        58⤵
        
        PID:2380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        59⤵
        
        PID:672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        60⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        61⤵
        
        PID:1276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        62⤵
        
        PID:2220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        63⤵
        
        PID:4256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        64⤵
        
        PID:4160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        65⤵
        
        PID:1656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        66⤵
        
        PID:5008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        67⤵
        
        PID:1340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        68⤵
        
        PID:5064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        69⤵
        
        PID:2876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        70⤵
        
        PID:1660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        71⤵
        
        PID:4536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        72⤵
        
        PID:2912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        73⤵
        
        PID:3980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        74⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        75⤵
        
        PID:3608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        76⤵
        
        PID:1832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        77⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        78⤵
        
        PID:4084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        79⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        80⤵
        
        PID:1056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        81⤵
        
        PID:4432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        82⤵
        
        PID:3184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        83⤵
        
        PID:3868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        84⤵
        
        PID:3436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        85⤵
        
        PID:2760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        86⤵
        
        PID:1772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        87⤵
        
        PID:4164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        88⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        89⤵
        
        PID:4400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        90⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        91⤵
        
        PID:1964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        92⤵
        
        PID:4304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        93⤵
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        94⤵
        
        PID:2184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        95⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        96⤵
        
        PID:4452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        97⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        98⤵
        
        PID:636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        99⤵
        
        PID:1496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        100⤵
        
        PID:2272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        101⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        102⤵
        
        PID:5164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        103⤵
        
        PID:5180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        104⤵
        
        PID:5196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        105⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        106⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        107⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        108⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        109⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        110⤵
        
        PID:5288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        111⤵
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        112⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        113⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        114⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        115⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        116⤵
        
        PID:5384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        117⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        118⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        119⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        120⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        121⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        122⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        123⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        124⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        125⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        126⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        127⤵
        
        PID:5560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        128⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        129⤵
        
        PID:5592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        130⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        131⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        132⤵
        
        PID:5648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        133⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        134⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        135⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        136⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        137⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        138⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        139⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        140⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        141⤵
        
        PID:5844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        142⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        143⤵
        
        PID:5876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        144⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        145⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        146⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        147⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        148⤵
        
        PID:5944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        149⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        150⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        151⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        152⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        153⤵
        
        PID:6024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        154⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        155⤵
        
        PID:6060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        156⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        157⤵
        
        PID:6088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        158⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        159⤵
        
        PID:6120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        160⤵
        
        PID:6136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        161⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        162⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        163⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        164⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        165⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        166⤵
        
        PID:6228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        167⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        168⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        169⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        170⤵
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        171⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        172⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        173⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        174⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        175⤵
        
        PID:6424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        176⤵
        
        PID:6440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        177⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        178⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        179⤵
        
        PID:6480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        180⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        181⤵
        
        PID:6508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        182⤵
        
        PID:6524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        183⤵
        
        PID:6540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        184⤵
        
        PID:6556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        185⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        186⤵
        
        PID:6588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        187⤵
        
        PID:6604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        188⤵
        
        PID:6620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        189⤵
        
        PID:6636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        190⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        191⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        192⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        193⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        194⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        195⤵
        
        PID:6724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        196⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        197⤵
        
        PID:6756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        198⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        199⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        200⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        201⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        202⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        203⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        204⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        205⤵
        
        PID:6892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        206⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        207⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        208⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        209⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        210⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        211⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        212⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        213⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        214⤵
        
        PID:7156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        215⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        216⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        217⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        218⤵
        
        PID:7220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        219⤵
        
        PID:7236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        220⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        221⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        222⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        223⤵
        
        PID:7316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        224⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        225⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        226⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        227⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        228⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        229⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        230⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        231⤵
        
        PID:7432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        232⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        233⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        234⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        235⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        236⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        237⤵
        
        PID:7508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        238⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        239⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        240⤵
        
        PID:7564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        241⤵
        
        PID:7580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        242⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        243⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        244⤵
        
        PID:7624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        245⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        246⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        247⤵
        
        PID:7676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        248⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        249⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        250⤵
        
        PID:7724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        251⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        252⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        253⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        254⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        255⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        256⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        257⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        258⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        259⤵
        
        PID:7868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        260⤵
        
        PID:7884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        261⤵
        
        PID:7900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        262⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        263⤵
        
        PID:7932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        264⤵
        
        PID:7948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        265⤵
        
        PID:7964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        266⤵
        
        PID:7980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        267⤵
        
        PID:7992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        268⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        269⤵
        
        PID:8020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        270⤵
        
        PID:8036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        271⤵
        
        PID:8052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        272⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        273⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        274⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        275⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        276⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        277⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        278⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        279⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        280⤵
        
        PID:8188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        281⤵
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        282⤵
        
        PID:1820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        283⤵
        
        PID:64
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        284⤵
        
        PID:5752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        285⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        286⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        287⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        288⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        289⤵
        
        PID:8228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        290⤵
        
        PID:8244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        291⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        292⤵
        
        PID:8276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        293⤵
        
        PID:8292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        294⤵
        
        PID:8308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        295⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        296⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        297⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        298⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        299⤵
        
        PID:8384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        300⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        301⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        302⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        303⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        304⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        305⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        306⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        307⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        308⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        309⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        310⤵
        
        PID:8552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        311⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        312⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        313⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        314⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        315⤵
        
        PID:8664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        316⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        317⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        318⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        319⤵
        
        PID:8724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        320⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        321⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        322⤵
        
        PID:8772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        323⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        324⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        325⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        326⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        327⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        328⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        329⤵
        
        PID:8876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        330⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        331⤵
        
        PID:8908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        332⤵
        
        PID:8924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        333⤵
        
        PID:8940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        334⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        335⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        336⤵
        
        PID:8988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        337⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        338⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        339⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        340⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        341⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        342⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        343⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        344⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        345⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        346⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        347⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        348⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        349⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        350⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        351⤵
        
        PID:8624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        352⤵
        
        PID:9228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        353⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        354⤵
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        355⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        356⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        357⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        358⤵
        
        PID:9320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        359⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        360⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        361⤵
        
        PID:9368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        362⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        363⤵
        
        PID:9400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        364⤵
        
        PID:9416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        365⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        366⤵
        
        PID:9448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        367⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        368⤵
        
        PID:9476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        369⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        370⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        371⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        372⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        373⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        374⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        375⤵
        
        PID:9576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        376⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        377⤵
        
        PID:9604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        378⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        379⤵
        
        PID:9640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        380⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        381⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        382⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        383⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        384⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        385⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        386⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        387⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        388⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        389⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        390⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        391⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        392⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        393⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        394⤵
        
        PID:9876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        395⤵
        
        PID:9888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        396⤵
        
        PID:9904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        397⤵
        
        PID:9916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        398⤵
        
        PID:9932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        399⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        400⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        401⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        402⤵
        
        PID:9992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        403⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        404⤵
        
        PID:10024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        405⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        406⤵
        
        PID:10056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        407⤵
        
        PID:10072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        408⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        409⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        410⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        411⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        412⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        413⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        414⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        415⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        416⤵
        
        PID:10212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        417⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        418⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        419⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        420⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        421⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        422⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        423⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        424⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        425⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        426⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        427⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        428⤵
        
        PID:10396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        429⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        430⤵
        
        PID:10464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        431⤵
        
        PID:10508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        432⤵
        
        PID:10524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        433⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        434⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        435⤵
        
        PID:10620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        436⤵
        
        PID:10636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        437⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        438⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        439⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        440⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        441⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        442⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        443⤵
        
        PID:10756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        444⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        445⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        446⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        447⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        448⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        449⤵
        
        PID:10844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        450⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        451⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        452⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        453⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        454⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        455⤵
        
        PID:10932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        456⤵
        
        PID:10948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        457⤵
        
        PID:10964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        458⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        459⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        460⤵
        
        PID:11012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        461⤵
        
        PID:11028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        462⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        463⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        464⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        465⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        466⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        467⤵
        
        PID:11128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        468⤵
        
        PID:11144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        469⤵
        
        PID:11160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        470⤵
        
        PID:11176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        471⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        472⤵
        
        PID:11208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        473⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        474⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        475⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        476⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        477⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        478⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        479⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        480⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        481⤵
        
        PID:11348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        482⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        483⤵
        
        PID:11376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        484⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        485⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        486⤵
        
        PID:11424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        487⤵
        
        PID:11436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        488⤵
        
        PID:11452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        489⤵
        
        PID:11468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        490⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        491⤵
        
        PID:11496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        492⤵
        
        PID:11508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        493⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        494⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        495⤵
        
        PID:11556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        496⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        497⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        498⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        499⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        500⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        501⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        502⤵
        
        PID:11668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        503⤵
        
        PID:11684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        504⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        505⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        506⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        507⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        508⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        509⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        510⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        511⤵
        
        PID:11804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        512⤵
        
        PID:11820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        513⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        514⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        515⤵
        
        PID:11860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        516⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        517⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        518⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        519⤵
        
        PID:11920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        520⤵
        
        PID:11936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        521⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        522⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        523⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        524⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        525⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        526⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        527⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        528⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        529⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        530⤵
        
        PID:12088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        531⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        532⤵
        
        PID:12116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        533⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        534⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        535⤵
        
        PID:12160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        536⤵
        
        PID:12176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        537⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        538⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        539⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        540⤵
        
        PID:12236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        541⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        542⤵
        
        PID:12264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        543⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        544⤵
        
        PID:11244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        545⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        546⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        547⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        548⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        549⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        550⤵
        
        PID:12376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        551⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        552⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        553⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        554⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        555⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        556⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        557⤵
        
        PID:12488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        558⤵
        
        PID:12504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        559⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        560⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        561⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        562⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        563⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        564⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        565⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        566⤵
        
        PID:12612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        567⤵
        
        PID:12628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        568⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        569⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        570⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        571⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        572⤵
        
        PID:12708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        573⤵
        
        PID:12724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        574⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        575⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        576⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        577⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        578⤵
        
        PID:12796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        579⤵
        
        PID:12808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        580⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        581⤵
        
        PID:12844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        582⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        583⤵
        
        PID:12872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        584⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        585⤵
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        586⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        587⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        588⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        589⤵
        
        PID:12960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        590⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        591⤵
        
        PID:12992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        592⤵
        
        PID:13008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        593⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        594⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        595⤵
        
        PID:13052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        596⤵
        
        PID:13068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        597⤵
        
        PID:13084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        598⤵
        
        PID:13100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        599⤵
        
        PID:13116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        600⤵
        
        PID:13132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        601⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        602⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        603⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        604⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        605⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        606⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        607⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        608⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        609⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        610⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        611⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        612⤵
        
        PID:6920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        613⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        614⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        615⤵
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        616⤵
        
        PID:4848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        617⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        618⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        619⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        620⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        621⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        622⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        623⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        624⤵
        
        PID:13428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        625⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        626⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        627⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        628⤵
        
        PID:13492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        629⤵
        
        PID:13508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        630⤵
        
        PID:13524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        631⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        632⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        633⤵
        
        PID:13564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        634⤵
        
        PID:13580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        635⤵
        
        PID:13600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        636⤵
        
        PID:13612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        637⤵
        
        PID:13628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        638⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        639⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        640⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        641⤵
        
        PID:13684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        642⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        643⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        644⤵
        
        PID:13728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        645⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        646⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        647⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        648⤵
        
        PID:13792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        649⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        650⤵
        
        PID:13820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        651⤵
        
        PID:13836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        652⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        653⤵
        
        PID:13868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        654⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        655⤵
        
        PID:13904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        656⤵
        
        PID:13916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        657⤵
        
        PID:13932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        658⤵
        
        PID:13952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        659⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        660⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        661⤵
        
        PID:14012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        662⤵
        
        PID:14028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        663⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        664⤵
        
        PID:14056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        665⤵
        
        PID:14072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        666⤵
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        667⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        668⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        669⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        670⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        671⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        672⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        673⤵
        
        PID:14204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        674⤵
        
        PID:14220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        675⤵
        
        PID:14236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        676⤵
        
        PID:14252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        677⤵
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        678⤵
        
        PID:14280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        679⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        680⤵
        
        PID:14312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        681⤵
        
        PID:14328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        682⤵
        
        PID:10588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        683⤵
        
        PID:6388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        684⤵
        
        PID:14352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        685⤵
        
        PID:14368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        686⤵
        
        PID:14384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        687⤵
        
        PID:14400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        688⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        689⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        690⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        691⤵
        
        PID:14460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        692⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        693⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        694⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        695⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        696⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        697⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        698⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        699⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        700⤵
        
        PID:14592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        701⤵
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        702⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        703⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        704⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        705⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        706⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        707⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        708⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        709⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        710⤵
        
        PID:14740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        711⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        712⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        713⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        714⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        715⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        716⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        717⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        718⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        719⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        720⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        721⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        722⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        723⤵
        
        PID:14940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        724⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        725⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        726⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        727⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        728⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        729⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        730⤵
        
        PID:15052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        731⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        732⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        733⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        734⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        735⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        736⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        737⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        738⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        739⤵
        
        PID:15188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        740⤵
        
        PID:15200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        741⤵
        
        PID:15216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        742⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        743⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        744⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        745⤵
        
        PID:15284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        746⤵
        
        PID:15300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        747⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        748⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        749⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        750⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        751⤵
        
        PID:2588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        752⤵
        
        PID:15364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        753⤵
        
        PID:15376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        754⤵
        
        PID:15392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        755⤵
        
        PID:15408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        756⤵
        
        PID:15424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        757⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        758⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        759⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        760⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        761⤵
        
        PID:15504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        762⤵
        
        PID:15520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        763⤵
        
        PID:15536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        764⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        765⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        766⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        767⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        768⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        769⤵
        
        PID:15628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        770⤵
        
        PID:15644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        771⤵
        
        PID:15660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        772⤵
        
        PID:15676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        773⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        774⤵
        
        PID:15704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        775⤵
        
        PID:15720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        776⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        777⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        778⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        779⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        780⤵
        
        PID:15788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        781⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        782⤵
        
        PID:15820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        783⤵
        
        PID:15832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        784⤵
        
        PID:15844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        785⤵
        
        PID:15860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        786⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        787⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        788⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        789⤵
        
        PID:15916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        790⤵
        
        PID:15932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        791⤵
        
        PID:15944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        792⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        793⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        794⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        795⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        796⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        797⤵
        
        PID:16020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        798⤵
        
        PID:16036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        799⤵
        
        PID:16052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        800⤵
        
        PID:16064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        801⤵
        
        PID:16080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        802⤵
        
        PID:16096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        803⤵
        
        PID:16112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        804⤵
        
        PID:16128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        805⤵
        
        PID:16144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        806⤵
        
        PID:16156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        807⤵
        
        PID:16172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        808⤵
        
        PID:16188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        809⤵
        
        PID:16200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        810⤵
        
        PID:16216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        811⤵
        
        PID:16228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        812⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        813⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        814⤵
        
        PID:16272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        815⤵
        
        PID:16288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        816⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        817⤵
        
        PID:16320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        818⤵
        
        PID:16332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        819⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        820⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        821⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        822⤵
        
        PID:4376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        823⤵
        
        PID:15140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        824⤵
        
        PID:4832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        825⤵
        
        PID:4372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        826⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        827⤵
        
        PID:4912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        828⤵
        
        PID:16396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        829⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        830⤵
        
        PID:16428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        831⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        832⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        833⤵
        
        PID:16464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        834⤵
        
        PID:16480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        835⤵
        
        PID:16496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        836⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        837⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        838⤵
        
        PID:16536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        839⤵
        
        PID:16548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        840⤵
        
        PID:16564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        841⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        842⤵
        
        PID:16596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        843⤵
        
        PID:16612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        844⤵
        
        PID:16628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        845⤵
        
        PID:16644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        846⤵
        
        PID:16660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        847⤵
        
        PID:16676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        848⤵
        
        PID:16692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        849⤵
        
        PID:16708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        850⤵
        
        PID:16724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        851⤵
        
        PID:16736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        852⤵
        
        PID:16752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        853⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        854⤵
        
        PID:16788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        855⤵
        
        PID:16804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        856⤵
        
        PID:16816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        857⤵
        
        PID:16832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        858⤵
        
        PID:16844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        859⤵
        
        PID:16860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        860⤵
        
        PID:16876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        861⤵
        
        PID:16888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        862⤵
        
        PID:16904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        863⤵
        
        PID:16920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        864⤵
        
        PID:16932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        865⤵
        
        PID:16948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        866⤵
        
        PID:16964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        867⤵
        
        PID:16976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        868⤵
        
        PID:16992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        869⤵
        
        PID:17004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        870⤵
        
        PID:17016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        871⤵
        
        PID:17028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        872⤵
        
        PID:17040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        873⤵
        
        PID:17056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        874⤵
        
        PID:17072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        875⤵
        
        PID:17088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        876⤵
        
        PID:17104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        877⤵
        
        PID:17120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        878⤵
        
        PID:17132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        879⤵
        
        PID:17148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        880⤵
        
        PID:17164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        881⤵
        
        PID:17184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        882⤵
        
        PID:17200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll,#1
        883⤵
        
        PID:17212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/17132-3-0x0000000075010000-0x0000000075294000-memory.dmp

Filesize
2.5MB

Download
memory/17148-2-0x0000000075010000-0x0000000075294000-memory.dmp

Filesize
2.5MB

Download
memory/17164-1-0x0000000075010000-0x0000000075294000-memory.dmp

Filesize
2.5MB

Download
memory/17200-0-0x0000000075010000-0x0000000075294000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads