6e1313e500f2a55a333a4f7ca31e8a9570887d19a311fba7bef426fbcdeb9cf2

Analysis

max time kernel
134s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 04:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll
Size

111KB
MD5

2afcf0c6398f143766fb8cf8bc3dab7d
SHA1

392a29185e788de469b9a0234321d84803813524
SHA256

6e1313e500f2a55a333a4f7ca31e8a9570887d19a311fba7bef426fbcdeb9cf2
SHA512

241fbcebad04c4d1405a72a02267a90394f9dd0652a88e396c04f5263a21471adff0c0b42f82fc456784286cb2b5f195682a69b936ab0bbce254ed0eaf1555f1
SSDEEP

3072:2mpHcmCP9qZffPNrgu9wdV/0wJxpAXRduSRbEtLVj:2+jCYZHPlv9wj0wJxpAXpRbE5x

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1028 wrote to memory of 1396	1028	rundll32.exe	84
PID 1028 wrote to memory of 1396	1028	rundll32.exe	84
PID 1028 wrote to memory of 1396	1028	rundll32.exe	84
PID 1396 wrote to memory of 3928	1396	rundll32.exe	85
PID 1396 wrote to memory of 3928	1396	rundll32.exe	85
PID 1396 wrote to memory of 3928	1396	rundll32.exe	85
PID 3928 wrote to memory of 4188	3928	rundll32.exe	86
PID 3928 wrote to memory of 4188	3928	rundll32.exe	86
PID 3928 wrote to memory of 4188	3928	rundll32.exe	86
PID 4188 wrote to memory of 1328	4188	rundll32.exe	87
PID 4188 wrote to memory of 1328	4188	rundll32.exe	87
PID 4188 wrote to memory of 1328	4188	rundll32.exe	87
PID 1328 wrote to memory of 1384	1328	rundll32.exe	88
PID 1328 wrote to memory of 1384	1328	rundll32.exe	88
PID 1328 wrote to memory of 1384	1328	rundll32.exe	88
PID 1384 wrote to memory of 4920	1384	rundll32.exe	89
PID 1384 wrote to memory of 4920	1384	rundll32.exe	89
PID 1384 wrote to memory of 4920	1384	rundll32.exe	89
PID 4920 wrote to memory of 860	4920	rundll32.exe	90
PID 4920 wrote to memory of 860	4920	rundll32.exe	90
PID 4920 wrote to memory of 860	4920	rundll32.exe	90
PID 860 wrote to memory of 4948	860	rundll32.exe	91
PID 860 wrote to memory of 4948	860	rundll32.exe	91
PID 860 wrote to memory of 4948	860	rundll32.exe	91
PID 4948 wrote to memory of 3328	4948	rundll32.exe	92
PID 4948 wrote to memory of 3328	4948	rundll32.exe	92
PID 4948 wrote to memory of 3328	4948	rundll32.exe	92
PID 3328 wrote to memory of 4580	3328	rundll32.exe	93
PID 3328 wrote to memory of 4580	3328	rundll32.exe	93
PID 3328 wrote to memory of 4580	3328	rundll32.exe	93
PID 4580 wrote to memory of 4200	4580	rundll32.exe	94
PID 4580 wrote to memory of 4200	4580	rundll32.exe	94
PID 4580 wrote to memory of 4200	4580	rundll32.exe	94
PID 4200 wrote to memory of 3364	4200	rundll32.exe	95
PID 4200 wrote to memory of 3364	4200	rundll32.exe	95
PID 4200 wrote to memory of 3364	4200	rundll32.exe	95
PID 3364 wrote to memory of 1928	3364	rundll32.exe	96
PID 3364 wrote to memory of 1928	3364	rundll32.exe	96
PID 3364 wrote to memory of 1928	3364	rundll32.exe	96
PID 1928 wrote to memory of 1772	1928	rundll32.exe	97
PID 1928 wrote to memory of 1772	1928	rundll32.exe	97
PID 1928 wrote to memory of 1772	1928	rundll32.exe	97
PID 1772 wrote to memory of 2224	1772	rundll32.exe	98
PID 1772 wrote to memory of 2224	1772	rundll32.exe	98
PID 1772 wrote to memory of 2224	1772	rundll32.exe	98
PID 2224 wrote to memory of 4808	2224	rundll32.exe	100
PID 2224 wrote to memory of 4808	2224	rundll32.exe	100
PID 2224 wrote to memory of 4808	2224	rundll32.exe	100
PID 4808 wrote to memory of 2368	4808	rundll32.exe	101
PID 4808 wrote to memory of 2368	4808	rundll32.exe	101
PID 4808 wrote to memory of 2368	4808	rundll32.exe	101
PID 2368 wrote to memory of 744	2368	rundll32.exe	102
PID 2368 wrote to memory of 744	2368	rundll32.exe	102
PID 2368 wrote to memory of 744	2368	rundll32.exe	102
PID 744 wrote to memory of 5028	744	rundll32.exe	104
PID 744 wrote to memory of 5028	744	rundll32.exe	104
PID 744 wrote to memory of 5028	744	rundll32.exe	104
PID 5028 wrote to memory of 1352	5028	rundll32.exe	105
PID 5028 wrote to memory of 1352	5028	rundll32.exe	105
PID 5028 wrote to memory of 1352	5028	rundll32.exe	105
PID 1352 wrote to memory of 4632	1352	rundll32.exe	106
PID 1352 wrote to memory of 4632	1352	rundll32.exe	106
PID 1352 wrote to memory of 4632	1352	rundll32.exe	106
PID 4632 wrote to memory of 1472	4632	rundll32.exe	107

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1396
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3928
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4188
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1328
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:1384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:4920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:4948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:3328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:4200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:1928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:1772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:2224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:2368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:5028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:1352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        23⤵
        
        PID:1472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        24⤵
        
        PID:3884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        25⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        26⤵
        
        PID:4164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        27⤵
        
        PID:2868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        28⤵
        
        PID:232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        29⤵
        
        PID:3552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        30⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        31⤵
        
        PID:3448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        32⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        33⤵
        
        PID:388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        34⤵
        
        PID:2180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        35⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        36⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        37⤵
        
        PID:4300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        38⤵
        
        PID:964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        39⤵
        
        PID:2072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        40⤵
        
        PID:4336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        41⤵
        
        PID:2932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        42⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        43⤵
        
        PID:8
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        44⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        45⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        46⤵
        
        PID:4156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        47⤵
        
        PID:3312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        48⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        49⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        50⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        51⤵
        
        PID:3224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        52⤵
        
        PID:760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        53⤵
        
        PID:3572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        54⤵
        
        PID:4588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        55⤵
        
        PID:792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        56⤵
        
        PID:4552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        57⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        58⤵
        
        PID:4668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        59⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        60⤵
        
        PID:3600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        61⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        62⤵
        
        PID:1888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        63⤵
        
        PID:4664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        64⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        65⤵
        
        PID:5064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        66⤵
        
        PID:2120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        67⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        68⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        69⤵
        
        PID:1520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        70⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        71⤵
        
        PID:2124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        72⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        73⤵
        
        PID:3460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        74⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        75⤵
        
        PID:3492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        76⤵
        
        PID:4004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        77⤵
        
        PID:3636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        78⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        79⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        80⤵
        
        PID:512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        81⤵
        
        PID:3336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        82⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        83⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        84⤵
        
        PID:3780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        85⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        86⤵
        
        PID:4256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        87⤵
        
        PID:872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        88⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        89⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        90⤵
        
        PID:5068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        91⤵
        
        PID:3496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        92⤵
        
        PID:3840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        93⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        94⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        95⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        96⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        97⤵
        
        PID:1224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        98⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        99⤵
        
        PID:3512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        100⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        101⤵
        
        PID:4636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        102⤵
        
        PID:5136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        103⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        104⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        105⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        106⤵
        
        PID:5196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        107⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        108⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        109⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        110⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        111⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        112⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        113⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        114⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        115⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        116⤵
        
        PID:5384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        117⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        118⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        119⤵
        
        PID:5428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        120⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        121⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        122⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        123⤵
        
        PID:5492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        124⤵
        
        PID:5504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        125⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        126⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        127⤵
        
        PID:5548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        128⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        129⤵
        
        PID:5584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        130⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        131⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        132⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        133⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        134⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        135⤵
        
        PID:5668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        136⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        137⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        138⤵
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        139⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        140⤵
        
        PID:5748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        141⤵
        
        PID:5764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        142⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        143⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        144⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        145⤵
        
        PID:5828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        146⤵
        
        PID:5844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        147⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        148⤵
        
        PID:5876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        149⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        150⤵
        
        PID:5908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        151⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        152⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        153⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        154⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        155⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        156⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        157⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        158⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        159⤵
        
        PID:6048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        160⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        161⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        162⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        163⤵
        
        PID:6108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        164⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        165⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        166⤵
        
        PID:4248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        167⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        168⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        169⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        170⤵
        
        PID:6204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        171⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        172⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        173⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        174⤵
        
        PID:6268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        175⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        176⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        177⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        178⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        179⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        180⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        181⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        182⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        183⤵
        
        PID:6408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        184⤵
        
        PID:6424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        185⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        186⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        187⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        188⤵
        
        PID:6480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        189⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        190⤵
        
        PID:6512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        191⤵
        
        PID:6524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        192⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        193⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        194⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        195⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        196⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        197⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        198⤵
        
        PID:6632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        199⤵
        
        PID:6648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        200⤵
        
        PID:6664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        201⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        202⤵
        
        PID:6696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        203⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        204⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        205⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        206⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        207⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        208⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        209⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        210⤵
        
        PID:6824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        211⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        212⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        213⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        214⤵
        
        PID:6888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        215⤵
        
        PID:6904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        216⤵
        
        PID:6920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        217⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        218⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        219⤵
        
        PID:6968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        220⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        221⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        222⤵
        
        PID:7012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        223⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        224⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        225⤵
        
        PID:7060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        226⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        227⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        228⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        229⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        230⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        231⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        232⤵
        
        PID:3560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        233⤵
        
        PID:728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        234⤵
        
        PID:4748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        235⤵
        
        PID:4184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        236⤵
        
        PID:1900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        237⤵
        
        PID:3860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        238⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        239⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        240⤵
        
        PID:7208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        241⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        242⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        243⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        244⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        245⤵
        
        PID:7288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        246⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        247⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        248⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        249⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        250⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        251⤵
        
        PID:7372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        252⤵
        
        PID:7388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        253⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        254⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        255⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        256⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        257⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        258⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        259⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        260⤵
        
        PID:7508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        261⤵
        
        PID:7524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        262⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        263⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        264⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        265⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        266⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        267⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        268⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        269⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        270⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        271⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        272⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        273⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        274⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        275⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        276⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        277⤵
        
        PID:7776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        278⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        279⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        280⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        281⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        282⤵
        
        PID:7856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        283⤵
        
        PID:7872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        284⤵
        
        PID:7888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        285⤵
        
        PID:7904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        286⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        287⤵
        
        PID:7932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        288⤵
        
        PID:7948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        289⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        290⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        291⤵
        
        PID:7992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        292⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        293⤵
        
        PID:8020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        294⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        295⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        296⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        297⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        298⤵
        
        PID:8092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        299⤵
        
        PID:8108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        300⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        301⤵
        
        PID:8140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        302⤵
        
        PID:8152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        303⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        304⤵
        
        PID:8180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        305⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        306⤵
        
        PID:8208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        307⤵
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        308⤵
        
        PID:8240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        309⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        310⤵
        
        PID:8264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        311⤵
        
        PID:8276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        312⤵
        
        PID:8292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        313⤵
        
        PID:8308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        314⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        315⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        316⤵
        
        PID:8356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        317⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        318⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        319⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        320⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        321⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        322⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        323⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        324⤵
        
        PID:8468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        325⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        326⤵
        
        PID:8500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        327⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        328⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        329⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        330⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        331⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        332⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        333⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        334⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        335⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        336⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        337⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        338⤵
        
        PID:8680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        339⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        340⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        341⤵
        
        PID:8724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        342⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        343⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        344⤵
        
        PID:8768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        345⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        346⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        347⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        348⤵
        
        PID:8832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        349⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        350⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        351⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        352⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        353⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        354⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        355⤵
        
        PID:8928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        356⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        357⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        358⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        359⤵
        
        PID:8988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        360⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        361⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        362⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        363⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        364⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        365⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        366⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        367⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        368⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        369⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        370⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        371⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        372⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        373⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        374⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        375⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        376⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        377⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        378⤵
        
        PID:9284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        379⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        380⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        381⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        382⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        383⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        384⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        385⤵
        
        PID:9388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        386⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        387⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        388⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        389⤵
        
        PID:9456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        390⤵
        
        PID:9468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        391⤵
        
        PID:9484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        392⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        393⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        394⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        395⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        396⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        397⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        398⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        399⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        400⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        401⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        402⤵
        
        PID:9640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        403⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        404⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        405⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        406⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        407⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        408⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        409⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        410⤵
        
        PID:9764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        411⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        412⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        413⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        414⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        415⤵
        
        PID:9840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        416⤵
        
        PID:9856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        417⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        418⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        419⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        420⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        421⤵
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        422⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        423⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        424⤵
        
        PID:9976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        425⤵
        
        PID:9992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        426⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        427⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        428⤵
        
        PID:10036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        429⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        430⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        431⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        432⤵
        
        PID:10092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        433⤵
        
        PID:10108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        434⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        435⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        436⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        437⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        438⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        439⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        440⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        441⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        442⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        443⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        444⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        445⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        446⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        447⤵
        
        PID:10312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        448⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        449⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        450⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        451⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        452⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        453⤵
        
        PID:10404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        454⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        455⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        456⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        457⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        458⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        459⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        460⤵
        
        PID:10516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        461⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        462⤵
        
        PID:10548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        463⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        464⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        465⤵
        
        PID:10596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        466⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        467⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        468⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        469⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        470⤵
        
        PID:10672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        471⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        472⤵
        
        PID:10704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        473⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        474⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        475⤵
        
        PID:10752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        476⤵
        
        PID:10768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        477⤵
        
        PID:10780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        478⤵
        
        PID:10796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        479⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        480⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        481⤵
        
        PID:10844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        482⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        483⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        484⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        485⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        486⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        487⤵
        
        PID:10932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        488⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        489⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        490⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        491⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        492⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        493⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        494⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        495⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        496⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        497⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        498⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        499⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        500⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        501⤵
        
        PID:11136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        502⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        503⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        504⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        505⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        506⤵
        
        PID:11208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        507⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        508⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        509⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        510⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        511⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        512⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        513⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        514⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        515⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        516⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        517⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        518⤵
        
        PID:11388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        519⤵
        
        PID:11404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        520⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        521⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        522⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        523⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        524⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        525⤵
        
        PID:11492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        526⤵
        
        PID:11508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        527⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        528⤵
        
        PID:11536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        529⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        530⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        531⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        532⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        533⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        534⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        535⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        536⤵
        
        PID:11656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        537⤵
        
        PID:11672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        538⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        539⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        540⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        541⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        542⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        543⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        544⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        545⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        546⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        547⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        548⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        549⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        550⤵
        
        PID:11872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        551⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        552⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        553⤵
        
        PID:11916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        554⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        555⤵
        
        PID:11944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        556⤵
        
        PID:11960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        557⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        558⤵
        
        PID:11988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        559⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        560⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        561⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        562⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        563⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        564⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        565⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        566⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        567⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        568⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        569⤵
        
        PID:12152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        570⤵
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        571⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        572⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        573⤵
        
        PID:12216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        574⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        575⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        576⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        577⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        578⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        579⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        580⤵
        
        PID:12324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        581⤵
        
        PID:12340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        582⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        583⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        584⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        585⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        586⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        587⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        588⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        589⤵
        
        PID:12456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        590⤵
        
        PID:12472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        591⤵
        
        PID:12488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        592⤵
        
        PID:12504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        593⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        594⤵
        
        PID:12536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        595⤵
        
        PID:12552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        596⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        597⤵
        
        PID:12584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        598⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        599⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        600⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        601⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        602⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        603⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        604⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        605⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        606⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        607⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        608⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        609⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        610⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        611⤵
        
        PID:12792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        612⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        613⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        614⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        615⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        616⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        617⤵
        
        PID:12876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        618⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        619⤵
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        620⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        621⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        622⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        623⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        624⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        625⤵
        
        PID:12988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        626⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        627⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        628⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        629⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        630⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        631⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        632⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        633⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        634⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        635⤵
        
        PID:13152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        636⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        637⤵
        
        PID:13176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        638⤵
        
        PID:13192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        639⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        640⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        641⤵
        
        PID:13240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        642⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        643⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        644⤵
        
        PID:13288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        645⤵
        
        PID:13304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        646⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        647⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        648⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        649⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        650⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        651⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        652⤵
        
        PID:13408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        653⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        654⤵
        
        PID:13440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        655⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        656⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        657⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        658⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        659⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        660⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        661⤵
        
        PID:13548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        662⤵
        
        PID:13564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        663⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        664⤵
        
        PID:13596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        665⤵
        
        PID:13612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        666⤵
        
        PID:13628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        667⤵
        
        PID:13644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        668⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        669⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        670⤵
        
        PID:13692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        671⤵
        
        PID:13708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        672⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        673⤵
        
        PID:13740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        674⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        675⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        676⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        677⤵
        
        PID:13804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        678⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        679⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        680⤵
        
        PID:13848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        681⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        682⤵
        
        PID:13880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        683⤵
        
        PID:13896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        684⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        685⤵
        
        PID:13928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        686⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        687⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        688⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        689⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        690⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        691⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        692⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        693⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        694⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        695⤵
        
        PID:14080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        696⤵
        
        PID:14092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        697⤵
        
        PID:14108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        698⤵
        
        PID:14124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        699⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        700⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        701⤵
        
        PID:14172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        702⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        703⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        704⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        705⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        706⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        707⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        708⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        709⤵
        
        PID:14284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        710⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        711⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        712⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        713⤵
        
        PID:14352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        714⤵
        
        PID:14368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        715⤵
        
        PID:14384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        716⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        717⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        718⤵
        
        PID:14424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        719⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        720⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        721⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        722⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        723⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        724⤵
        
        PID:14520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        725⤵
        
        PID:14536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        726⤵
        
        PID:14548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        727⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        728⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        729⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        730⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        731⤵
        
        PID:14628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        732⤵
        
        PID:14644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        733⤵
        
        PID:14660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        734⤵
        
        PID:14676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        735⤵
        
        PID:14692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        736⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        737⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        738⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        739⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        740⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        741⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        742⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        743⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        744⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        745⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        746⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        747⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        748⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        749⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        750⤵
        
        PID:14928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        751⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        752⤵
        
        PID:14960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        753⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        754⤵
        
        PID:14992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        755⤵
        
        PID:15008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        756⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        757⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        758⤵
        
        PID:15048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        759⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        760⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        761⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        762⤵
        
        PID:15104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        763⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        764⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        765⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        766⤵
        
        PID:15164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        767⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        768⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        769⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        770⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        771⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        772⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        773⤵
        
        PID:15272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        774⤵
        
        PID:15284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        775⤵
        
        PID:15300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        776⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        777⤵
        
        PID:15328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        778⤵
        
        PID:15344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        779⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        780⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        781⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        782⤵
        
        PID:15396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        783⤵
        
        PID:15412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        784⤵
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        785⤵
        
        PID:15444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        786⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        787⤵
        
        PID:15476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        788⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        789⤵
        
        PID:15504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        790⤵
        
        PID:15520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        791⤵
        
        PID:15536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        792⤵
        
        PID:15552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        793⤵
        
        PID:15564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        794⤵
        
        PID:15588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        795⤵
        
        PID:15604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        796⤵
        
        PID:15620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        797⤵
        
        PID:15636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        798⤵
        
        PID:15652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        799⤵
        
        PID:15668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        800⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        801⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        802⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        803⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        804⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        805⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        806⤵
        
        PID:15780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        807⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        808⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        809⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        810⤵
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        811⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        812⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        813⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        814⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        815⤵
        
        PID:15912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        816⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        817⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        818⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        819⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        820⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        821⤵
        
        PID:16000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        822⤵
        
        PID:16016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        823⤵
        
        PID:16028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        824⤵
        
        PID:16044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        825⤵
        
        PID:16060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        826⤵
        
        PID:16076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        827⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        828⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        829⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        830⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        831⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        832⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        833⤵
        
        PID:16184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        834⤵
        
        PID:16200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        835⤵
        
        PID:16216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        836⤵
        
        PID:16232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        837⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        838⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        839⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        840⤵
        
        PID:16296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        841⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        842⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        843⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        844⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        845⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        846⤵
        
        PID:1944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        847⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        848⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        849⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        850⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        851⤵
        
        PID:16420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        852⤵
        
        PID:16436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        853⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        854⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        855⤵
        
        PID:16484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        856⤵
        
        PID:16500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        857⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        858⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        859⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        860⤵
        
        PID:16552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        861⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        862⤵
        
        PID:16584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        863⤵
        
        PID:16600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        864⤵
        
        PID:16612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        865⤵
        
        PID:16624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        866⤵
        
        PID:16636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        867⤵
        
        PID:16652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        868⤵
        
        PID:16668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        869⤵
        
        PID:16684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        870⤵
        
        PID:16700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        871⤵
        
        PID:16712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        872⤵
        
        PID:16728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        873⤵
        
        PID:16744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        874⤵
        
        PID:16756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        875⤵
        
        PID:16768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        876⤵
        
        PID:16784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        877⤵
        
        PID:16800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        878⤵
        
        PID:16820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        879⤵
        
        PID:16832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        880⤵
        
        PID:16852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        881⤵
        
        PID:16868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2afcf0c6398f143766fb8cf8bc3dab7d_JaffaCakes118.dll,#1
        882⤵
        
        PID:16884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/16832-2-0x0000000074A80000-0x0000000074D04000-memory.dmp

Filesize
2.5MB

Download
memory/16852-1-0x0000000074A80000-0x0000000074D04000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads