b95a0436fe7ad195bb714056c091a79216b6cb35425dfc470b286d24cc4df2c4

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 22:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll
Size

17KB
MD5

36b3ee42c0083a13e383ce03ea54152c
SHA1

f71fc589faa2584abde483988f1ab06fc1622629
SHA256

b95a0436fe7ad195bb714056c091a79216b6cb35425dfc470b286d24cc4df2c4
SHA512

159fa94622df16790d5bf55fb92011bfdf31a82c16d39120c1712a7a762ec3fb63e2237f091c05bcdac1d734f9ea72a63782aee5da2451de2453f8a9455cf881
SSDEEP

384:WFps7YUQQ1rNmD4ZWezyWttwHhhkGwPA+33uuSu/+ZArEccvH:WFKaQrcF+ntygjX/+qE/

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4700 wrote to memory of 1632	4700	rundll32.exe	83
PID 4700 wrote to memory of 1632	4700	rundll32.exe	83
PID 4700 wrote to memory of 1632	4700	rundll32.exe	83
PID 1632 wrote to memory of 892	1632	rundll32.exe	84
PID 1632 wrote to memory of 892	1632	rundll32.exe	84
PID 1632 wrote to memory of 892	1632	rundll32.exe	84
PID 892 wrote to memory of 2832	892	rundll32.exe	85
PID 892 wrote to memory of 2832	892	rundll32.exe	85
PID 892 wrote to memory of 2832	892	rundll32.exe	85
PID 2832 wrote to memory of 1196	2832	rundll32.exe	86
PID 2832 wrote to memory of 1196	2832	rundll32.exe	86
PID 2832 wrote to memory of 1196	2832	rundll32.exe	86
PID 1196 wrote to memory of 3636	1196	rundll32.exe	87
PID 1196 wrote to memory of 3636	1196	rundll32.exe	87
PID 1196 wrote to memory of 3636	1196	rundll32.exe	87
PID 3636 wrote to memory of 3624	3636	rundll32.exe	88
PID 3636 wrote to memory of 3624	3636	rundll32.exe	88
PID 3636 wrote to memory of 3624	3636	rundll32.exe	88
PID 3624 wrote to memory of 4804	3624	rundll32.exe	89
PID 3624 wrote to memory of 4804	3624	rundll32.exe	89
PID 3624 wrote to memory of 4804	3624	rundll32.exe	89
PID 4804 wrote to memory of 2980	4804	rundll32.exe	90
PID 4804 wrote to memory of 2980	4804	rundll32.exe	90
PID 4804 wrote to memory of 2980	4804	rundll32.exe	90
PID 2980 wrote to memory of 4232	2980	rundll32.exe	91
PID 2980 wrote to memory of 4232	2980	rundll32.exe	91
PID 2980 wrote to memory of 4232	2980	rundll32.exe	91
PID 4232 wrote to memory of 4316	4232	rundll32.exe	92
PID 4232 wrote to memory of 4316	4232	rundll32.exe	92
PID 4232 wrote to memory of 4316	4232	rundll32.exe	92
PID 4316 wrote to memory of 1512	4316	rundll32.exe	93
PID 4316 wrote to memory of 1512	4316	rundll32.exe	93
PID 4316 wrote to memory of 1512	4316	rundll32.exe	93
PID 1512 wrote to memory of 3168	1512	rundll32.exe	94
PID 1512 wrote to memory of 3168	1512	rundll32.exe	94
PID 1512 wrote to memory of 3168	1512	rundll32.exe	94
PID 3168 wrote to memory of 2956	3168	rundll32.exe	95
PID 3168 wrote to memory of 2956	3168	rundll32.exe	95
PID 3168 wrote to memory of 2956	3168	rundll32.exe	95
PID 2956 wrote to memory of 2020	2956	rundll32.exe	96
PID 2956 wrote to memory of 2020	2956	rundll32.exe	96
PID 2956 wrote to memory of 2020	2956	rundll32.exe	96
PID 2020 wrote to memory of 3156	2020	rundll32.exe	97
PID 2020 wrote to memory of 3156	2020	rundll32.exe	97
PID 2020 wrote to memory of 3156	2020	rundll32.exe	97
PID 3156 wrote to memory of 4840	3156	rundll32.exe	98
PID 3156 wrote to memory of 4840	3156	rundll32.exe	98
PID 3156 wrote to memory of 4840	3156	rundll32.exe	98
PID 4840 wrote to memory of 728	4840	rundll32.exe	99
PID 4840 wrote to memory of 728	4840	rundll32.exe	99
PID 4840 wrote to memory of 728	4840	rundll32.exe	99
PID 728 wrote to memory of 2976	728	rundll32.exe	101
PID 728 wrote to memory of 2976	728	rundll32.exe	101
PID 728 wrote to memory of 2976	728	rundll32.exe	101
PID 2976 wrote to memory of 620	2976	rundll32.exe	102
PID 2976 wrote to memory of 620	2976	rundll32.exe	102
PID 2976 wrote to memory of 620	2976	rundll32.exe	102
PID 620 wrote to memory of 1748	620	rundll32.exe	103
PID 620 wrote to memory of 1748	620	rundll32.exe	103
PID 620 wrote to memory of 1748	620	rundll32.exe	103
PID 1748 wrote to memory of 1040	1748	rundll32.exe	104
PID 1748 wrote to memory of 1040	1748	rundll32.exe	104
PID 1748 wrote to memory of 1040	1748	rundll32.exe	104
PID 1040 wrote to memory of 2824	1040	rundll32.exe	105

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4700
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1632
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:892
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2832
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1196
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:2980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:1512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:2976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:1748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        23⤵
        
        PID:2824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        24⤵
        
        PID:4072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        25⤵
        
        PID:2348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        26⤵
        
        PID:1820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        27⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        28⤵
        
        PID:4740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        29⤵
        
        PID:4872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        30⤵
        
        PID:1844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        31⤵
        
        PID:2912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        32⤵
        
        PID:3368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        33⤵
        
        PID:4624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        34⤵
        
        PID:1868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        35⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        36⤵
        
        PID:4552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        37⤵
        
        PID:4728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        38⤵
        
        PID:3912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        39⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        40⤵
        
        PID:2072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        41⤵
        
        PID:2788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        42⤵
        
        PID:3692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        43⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        44⤵
        
        PID:880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        45⤵
        
        PID:436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        46⤵
        
        PID:2312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        47⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        48⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        49⤵
        
        PID:4764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        50⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        51⤵
        
        PID:1128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        52⤵
        
        PID:8
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        53⤵
        
        PID:2092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        54⤵
        
        PID:2120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        55⤵
        
        PID:2400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        56⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        57⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        58⤵
        
        PID:316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        59⤵
        
        PID:2228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        60⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        61⤵
        
        PID:1092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        62⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        63⤵
        
        PID:4568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        64⤵
        
        PID:4176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        65⤵
        
        PID:3844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        66⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        67⤵
        
        PID:4704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        68⤵
        
        PID:3164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        69⤵
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        70⤵
        
        PID:1988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        71⤵
        
        PID:3608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        72⤵
        
        PID:2472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        73⤵
        
        PID:4004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        74⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        75⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        76⤵
        
        PID:4048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        77⤵
        
        PID:32
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        78⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        79⤵
        
        PID:2996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        80⤵
        
        PID:4524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        81⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        82⤵
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        83⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        84⤵
        
        PID:2760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        85⤵
        
        PID:2872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        86⤵
        
        PID:1112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        87⤵
        
        PID:996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        88⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        89⤵
        
        PID:4292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        90⤵
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        91⤵
        
        PID:4120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        92⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        93⤵
        
        PID:4080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        94⤵
        
        PID:3084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        95⤵
        
        PID:2148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        96⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        97⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        98⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        99⤵
        
        PID:5156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        100⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        101⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        102⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        103⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        104⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        105⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        106⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        107⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        108⤵
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        109⤵
        
        PID:5320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        110⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        111⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        112⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        113⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        114⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        115⤵
        
        PID:5428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        116⤵
        
        PID:5444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        117⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        118⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        119⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        120⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        121⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        122⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        123⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        124⤵
        
        PID:5556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        125⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        126⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        127⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        128⤵
        
        PID:5620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        129⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        130⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        131⤵
        
        PID:5668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        132⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        133⤵
        
        PID:5696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        134⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        135⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        136⤵
        
        PID:5740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        137⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        138⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        139⤵
        
        PID:5788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        140⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        141⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        142⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        143⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        144⤵
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        145⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        146⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        147⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        148⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        149⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        150⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        151⤵
        
        PID:5976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        152⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        153⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        154⤵
        
        PID:6016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        155⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        156⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        157⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        158⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        159⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        160⤵
        
        PID:6116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        161⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        162⤵
        
        PID:5216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        163⤵
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        164⤵
        
        PID:6168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        165⤵
        
        PID:6180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        166⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        167⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        168⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        169⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        170⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        171⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        172⤵
        
        PID:6296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        173⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        174⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        175⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        176⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        177⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        178⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        179⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        180⤵
        
        PID:6416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        181⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        182⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        183⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        184⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        185⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        186⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        187⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        188⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        189⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        190⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        191⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        192⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        193⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        194⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        195⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        196⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        197⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        198⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        199⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        200⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        201⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        202⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        203⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        204⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        205⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        206⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        207⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        208⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        209⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        210⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        211⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        212⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        213⤵
        
        PID:6932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        214⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        215⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        216⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        217⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        218⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        219⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        220⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        221⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        222⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        223⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        224⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        225⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        226⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        227⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        228⤵
        
        PID:2796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        229⤵
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        230⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        231⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        232⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        233⤵
        
        PID:3832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        234⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        235⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        236⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        237⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        238⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        239⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        240⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        241⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        242⤵
        
        PID:7276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        243⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        244⤵
        
        PID:7308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        245⤵
        
        PID:7324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        246⤵
        
        PID:7340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        247⤵
        
        PID:7356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        248⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        249⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        250⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        251⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        252⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        253⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        254⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        255⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        256⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        257⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        258⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        259⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        260⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        261⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        262⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        263⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        264⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        265⤵
        
        PID:7624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        266⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        267⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        268⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        269⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        270⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        271⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        272⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        273⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        274⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        275⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        276⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        277⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        278⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        279⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        280⤵
        
        PID:7856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        281⤵
        
        PID:7868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        282⤵
        
        PID:7884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        283⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        284⤵
        
        PID:7912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        285⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        286⤵
        
        PID:7936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        287⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        288⤵
        
        PID:7964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        289⤵
        
        PID:7980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        290⤵
        
        PID:7996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        291⤵
        
        PID:8012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        292⤵
        
        PID:8028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        293⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        294⤵
        
        PID:8056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        295⤵
        
        PID:8072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        296⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        297⤵
        
        PID:8100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        298⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        299⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        300⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        301⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        302⤵
        
        PID:8180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        303⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        304⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        305⤵
        
        PID:8228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        306⤵
        
        PID:8244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        307⤵
        
        PID:8260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        308⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        309⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        310⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        311⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        312⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        313⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        314⤵
        
        PID:8364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        315⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        316⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        317⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        318⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        319⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        320⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        321⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        322⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        323⤵
        
        PID:8512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        324⤵
        
        PID:8528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        325⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        326⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        327⤵
        
        PID:8576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        328⤵
        
        PID:8592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        329⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        330⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        331⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        332⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        333⤵
        
        PID:8668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        334⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        335⤵
        
        PID:8700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        336⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        337⤵
        
        PID:8732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        338⤵
        
        PID:8748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        339⤵
        
        PID:8760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        340⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        341⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        342⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        343⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        344⤵
        
        PID:8836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        345⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        346⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        347⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        348⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        349⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        350⤵
        
        PID:8936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        351⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        352⤵
        
        PID:8964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        353⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        354⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        355⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        356⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        357⤵
        
        PID:9040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        358⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        359⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        360⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        361⤵
        
        PID:9112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        362⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        363⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        364⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        365⤵
        
        PID:9176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        366⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        367⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        368⤵
        
        PID:3488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        369⤵
        
        PID:9228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        370⤵
        
        PID:9248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        371⤵
        
        PID:9264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        372⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        373⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        374⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        375⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        376⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        377⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        378⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        379⤵
        
        PID:9388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        380⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        381⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        382⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        383⤵
        
        PID:9448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        384⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        385⤵
        
        PID:9476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        386⤵
        
        PID:9488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        387⤵
        
        PID:9504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        388⤵
        
        PID:9520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        389⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        390⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        391⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        392⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        393⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        394⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        395⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        396⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        397⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        398⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        399⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        400⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        401⤵
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        402⤵
        
        PID:9728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        403⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        404⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        405⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        406⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        407⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        408⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        409⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        410⤵
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        411⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        412⤵
        
        PID:9872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        413⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        414⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        415⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        416⤵
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        417⤵
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        418⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        419⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        420⤵
        
        PID:10000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        421⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        422⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        423⤵
        
        PID:10044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        424⤵
        
        PID:10060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        425⤵
        
        PID:10076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        426⤵
        
        PID:10092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        427⤵
        
        PID:10108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        428⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        429⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        430⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        431⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        432⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        433⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        434⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        435⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        436⤵
        
        PID:4052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        437⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        438⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        439⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        440⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        441⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        442⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        443⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        444⤵
        
        PID:10328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        445⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        446⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        447⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        448⤵
        
        PID:10388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        449⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        450⤵
        
        PID:10412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        451⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        452⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        453⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        454⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        455⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        456⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        457⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        458⤵
        
        PID:10536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        459⤵
        
        PID:10552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        460⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        461⤵
        
        PID:10584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        462⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        463⤵
        
        PID:10616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        464⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        465⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        466⤵
        
        PID:10660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        467⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        468⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        469⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        470⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        471⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        472⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        473⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        474⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        475⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        476⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        477⤵
        
        PID:10832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        478⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        479⤵
        
        PID:10860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        480⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        481⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        482⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        483⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        484⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        485⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        486⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        487⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        488⤵
        
        PID:11004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        489⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        490⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        491⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        492⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        493⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        494⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        495⤵
        
        PID:11112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        496⤵
        
        PID:11124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        497⤵
        
        PID:11136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        498⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        499⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        500⤵
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        501⤵
        
        PID:11200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        502⤵
        
        PID:11216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        503⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        504⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        505⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        506⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        507⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        508⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        509⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        510⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        511⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        512⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        513⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        514⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        515⤵
        
        PID:11376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        516⤵
        
        PID:11388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        517⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        518⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        519⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        520⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        521⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        522⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        523⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        524⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        525⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        526⤵
        
        PID:11548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        527⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        528⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        529⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        530⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        531⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        532⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        533⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        534⤵
        
        PID:11668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        535⤵
        
        PID:11684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        536⤵
        
        PID:11696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        537⤵
        
        PID:11712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        538⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        539⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        540⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        541⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        542⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        543⤵
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        544⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        545⤵
        
        PID:11824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        546⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        547⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        548⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        549⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        550⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        551⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        552⤵
        
        PID:11928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        553⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        554⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        555⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        556⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        557⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        558⤵
        
        PID:12012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        559⤵
        
        PID:12028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        560⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        561⤵
        
        PID:12060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        562⤵
        
        PID:12072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        563⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        564⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        565⤵
        
        PID:12116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        566⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        567⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        568⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        569⤵
        
        PID:12172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        570⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        571⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        572⤵
        
        PID:12216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        573⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        574⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        575⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        576⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        577⤵
        
        PID:948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        578⤵
        
        PID:12292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        579⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        580⤵
        
        PID:12324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        581⤵
        
        PID:12340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        582⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        583⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        584⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        585⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        586⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        587⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        588⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        589⤵
        
        PID:12456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        590⤵
        
        PID:12472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        591⤵
        
        PID:12488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        592⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        593⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        594⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        595⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        596⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        597⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        598⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        599⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        600⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        601⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        602⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        603⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        604⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        605⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        606⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        607⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        608⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        609⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        610⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        611⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        612⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        613⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        614⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        615⤵
        
        PID:12852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        616⤵
        
        PID:12868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        617⤵
        
        PID:12884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        618⤵
        
        PID:12900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        619⤵
        
        PID:12916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        620⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        621⤵
        
        PID:12952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        622⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        623⤵
        
        PID:12980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        624⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        625⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        626⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        627⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        628⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        629⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        630⤵
        
        PID:13092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        631⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        632⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        633⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        634⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        635⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        636⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        637⤵
        
        PID:13196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        638⤵
        
        PID:13212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        639⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        640⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        641⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        642⤵
        
        PID:13276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        643⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        644⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        645⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        646⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        647⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        648⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        649⤵
        
        PID:13384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        650⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        651⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        652⤵
        
        PID:13428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        653⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        654⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        655⤵
        
        PID:13472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        656⤵
        
        PID:13488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        657⤵
        
        PID:13504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        658⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        659⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        660⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        661⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        662⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        663⤵
        
        PID:13596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        664⤵
        
        PID:13616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        665⤵
        
        PID:13632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        666⤵
        
        PID:13644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        667⤵
        
        PID:13660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        668⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        669⤵
        
        PID:13692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        670⤵
        
        PID:13708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        671⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        672⤵
        
        PID:13740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        673⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        674⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        675⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        676⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        677⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        678⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        679⤵
        
        PID:13836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        680⤵
        
        PID:13848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        681⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        682⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        683⤵
        
        PID:13888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        684⤵
        
        PID:13900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        685⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        686⤵
        
        PID:13928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        687⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        688⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        689⤵
        
        PID:13968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        690⤵
        
        PID:13980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        691⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        692⤵
        
        PID:14012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        693⤵
        
        PID:14024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        694⤵
        
        PID:14040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        695⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        696⤵
        
        PID:14072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        697⤵
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        698⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        699⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        700⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        701⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        702⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        703⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        704⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        705⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        706⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        707⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        708⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        709⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        710⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        711⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        712⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        713⤵
        
        PID:12924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        714⤵
        
        PID:14348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        715⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        716⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        717⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        718⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        719⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        720⤵
        
        PID:14440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        721⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        722⤵
        
        PID:14464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        723⤵
        
        PID:14480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        724⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        725⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        726⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        727⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        728⤵
        
        PID:14556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        729⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        730⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        731⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        732⤵
        
        PID:14612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        733⤵
        
        PID:14624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        734⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        735⤵
        
        PID:14656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        736⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        737⤵
        
        PID:14688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        738⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        739⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        740⤵
        
        PID:14740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        741⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        742⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        743⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        744⤵
        
        PID:14804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        745⤵
        
        PID:14820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        746⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        747⤵
        
        PID:14844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        748⤵
        
        PID:14868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        749⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        750⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        751⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        752⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        753⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        754⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        755⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        756⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        757⤵
        
        PID:15008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        758⤵
        
        PID:15024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        759⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        760⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        761⤵
        
        PID:15072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        762⤵
        
        PID:15084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        763⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        764⤵
        
        PID:15116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        765⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        766⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        767⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        768⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        769⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        770⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        771⤵
        
        PID:15224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        772⤵
        
        PID:15240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        773⤵
        
        PID:15252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        774⤵
        
        PID:15272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        775⤵
        
        PID:15288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        776⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        777⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        778⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        779⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        780⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        781⤵
        
        PID:15376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        782⤵
        
        PID:15388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        783⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        784⤵
        
        PID:15420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        785⤵
        
        PID:15436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        786⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        787⤵
        
        PID:15464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        788⤵
        
        PID:15480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        789⤵
        
        PID:15492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        790⤵
        
        PID:15512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        791⤵
        
        PID:15524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        792⤵
        
        PID:15540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        793⤵
        
        PID:15556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        794⤵
        
        PID:15572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        795⤵
        
        PID:15584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        796⤵
        
        PID:15600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        797⤵
        
        PID:15616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        798⤵
        
        PID:15636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        799⤵
        
        PID:15648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        800⤵
        
        PID:15664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        801⤵
        
        PID:15680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        802⤵
        
        PID:15692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        803⤵
        
        PID:15704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        804⤵
        
        PID:15720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        805⤵
        
        PID:15736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        806⤵
        
        PID:15752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        807⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        808⤵
        
        PID:15780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        809⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        810⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        811⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        812⤵
        
        PID:15836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        813⤵
        
        PID:15848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        814⤵
        
        PID:15864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        815⤵
        
        PID:15876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        816⤵
        
        PID:15896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        817⤵
        
        PID:15912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        818⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        819⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        820⤵
        
        PID:15960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        821⤵
        
        PID:15976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        822⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        823⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        824⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        825⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        826⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        827⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        828⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        829⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        830⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        831⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        832⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        833⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        834⤵
        
        PID:16184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        835⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        836⤵
        
        PID:16216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        837⤵
        
        PID:16232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        838⤵
        
        PID:16248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        839⤵
        
        PID:16264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        840⤵
        
        PID:16280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        841⤵
        
        PID:16296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        842⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        843⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        844⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        845⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        846⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        847⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        848⤵
        
        PID:2580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        849⤵
        
        PID:14996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        850⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        851⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        852⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        853⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        854⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        855⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        856⤵
        
        PID:16484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        857⤵
        
        PID:16500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        858⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        859⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        860⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        861⤵
        
        PID:16552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        862⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        863⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        864⤵
        
        PID:16596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        865⤵
        
        PID:16608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        866⤵
        
        PID:16628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        867⤵
        
        PID:16640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        868⤵
        
        PID:16652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        869⤵
        
        PID:16664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        870⤵
        
        PID:16680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        871⤵
        
        PID:16692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        872⤵
        
        PID:16708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        873⤵
        
        PID:16720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        874⤵
        
        PID:16732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        875⤵
        
        PID:16748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        876⤵
        
        PID:16768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        877⤵
        
        PID:16784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        878⤵
        
        PID:16800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        879⤵
        
        PID:16816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        880⤵
        
        PID:16828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        881⤵
        
        PID:16844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        882⤵
        
        PID:16860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        883⤵
        
        PID:16876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        884⤵
        
        PID:16892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        885⤵
        
        PID:16908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        886⤵
        
        PID:16924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        887⤵
        
        PID:16940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        888⤵
        
        PID:16956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        889⤵
        
        PID:16968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        890⤵
        
        PID:16984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        891⤵
        
        PID:17000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        892⤵
        
        PID:17016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        893⤵
        
        PID:17028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        894⤵
        
        PID:17044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        895⤵
        
        PID:17060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\36b3ee42c0083a13e383ce03ea54152c_JaffaCakes118.dll,#1
        896⤵
        
        PID:17076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/16968-4-0x0000000074BC0000-0x0000000074E44000-memory.dmp

Filesize
2.5MB

Download
memory/16984-3-0x0000000074BC0000-0x0000000074E44000-memory.dmp

Filesize
2.5MB

Download
memory/17000-2-0x0000000074BC0000-0x0000000074E44000-memory.dmp

Filesize
2.5MB

Download
memory/17016-1-0x0000000074BC0000-0x0000000074E44000-memory.dmp

Filesize
2.5MB

Download
memory/17028-0-0x0000000074BC0000-0x0000000074E44000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads