00c1f057588b328a726a1b69232e15a7687df766ebc40b98afef18fc6009b2f2

Analysis

max time kernel
93s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 01:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll
Size

277KB
MD5

32c5c0882814034e7e2292fc82462379
SHA1

4f96b9df07266bd725fc6ca4a10d72564134d2ce
SHA256

00c1f057588b328a726a1b69232e15a7687df766ebc40b98afef18fc6009b2f2
SHA512

89619d7f9881b3c16db7d0db64ee72b3413de6020c19efd8c4e2b1791704e73fd5e415dd29d265f4134c3f444cf6fb46513a201090c2aa42600874606d59fbff
SSDEEP

6144:xCiF1oHiIfe86vCZsaVhUzxpAaDPC+7vppBYpZVj60/+tXrhmoSU:xvFKfe/EiXDK+HGZVj6z5hmoSU

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1268 wrote to memory of 3608	1268	rundll32.exe	81
PID 1268 wrote to memory of 3608	1268	rundll32.exe	81
PID 1268 wrote to memory of 3608	1268	rundll32.exe	81
PID 3608 wrote to memory of 2836	3608	rundll32.exe	83
PID 3608 wrote to memory of 2836	3608	rundll32.exe	83
PID 3608 wrote to memory of 2836	3608	rundll32.exe	83
PID 2836 wrote to memory of 5080	2836	rundll32.exe	84
PID 2836 wrote to memory of 5080	2836	rundll32.exe	84
PID 2836 wrote to memory of 5080	2836	rundll32.exe	84
PID 5080 wrote to memory of 4452	5080	rundll32.exe	85
PID 5080 wrote to memory of 4452	5080	rundll32.exe	85
PID 5080 wrote to memory of 4452	5080	rundll32.exe	85
PID 4452 wrote to memory of 2348	4452	rundll32.exe	86
PID 4452 wrote to memory of 2348	4452	rundll32.exe	86
PID 4452 wrote to memory of 2348	4452	rundll32.exe	86
PID 2348 wrote to memory of 4996	2348	rundll32.exe	88
PID 2348 wrote to memory of 4996	2348	rundll32.exe	88
PID 2348 wrote to memory of 4996	2348	rundll32.exe	88
PID 4996 wrote to memory of 2060	4996	rundll32.exe	89
PID 4996 wrote to memory of 2060	4996	rundll32.exe	89
PID 4996 wrote to memory of 2060	4996	rundll32.exe	89
PID 2060 wrote to memory of 1484	2060	rundll32.exe	90
PID 2060 wrote to memory of 1484	2060	rundll32.exe	90
PID 2060 wrote to memory of 1484	2060	rundll32.exe	90
PID 1484 wrote to memory of 4280	1484	rundll32.exe	91
PID 1484 wrote to memory of 4280	1484	rundll32.exe	91
PID 1484 wrote to memory of 4280	1484	rundll32.exe	91
PID 4280 wrote to memory of 3548	4280	rundll32.exe	92
PID 4280 wrote to memory of 3548	4280	rundll32.exe	92
PID 4280 wrote to memory of 3548	4280	rundll32.exe	92
PID 3548 wrote to memory of 3672	3548	rundll32.exe	93
PID 3548 wrote to memory of 3672	3548	rundll32.exe	93
PID 3548 wrote to memory of 3672	3548	rundll32.exe	93
PID 3672 wrote to memory of 3516	3672	rundll32.exe	94
PID 3672 wrote to memory of 3516	3672	rundll32.exe	94
PID 3672 wrote to memory of 3516	3672	rundll32.exe	94
PID 3516 wrote to memory of 1772	3516	rundll32.exe	95
PID 3516 wrote to memory of 1772	3516	rundll32.exe	95
PID 3516 wrote to memory of 1772	3516	rundll32.exe	95
PID 1772 wrote to memory of 5012	1772	rundll32.exe	96
PID 1772 wrote to memory of 5012	1772	rundll32.exe	96
PID 1772 wrote to memory of 5012	1772	rundll32.exe	96
PID 5012 wrote to memory of 2816	5012	rundll32.exe	97
PID 5012 wrote to memory of 2816	5012	rundll32.exe	97
PID 5012 wrote to memory of 2816	5012	rundll32.exe	97
PID 2816 wrote to memory of 4268	2816	rundll32.exe	98
PID 2816 wrote to memory of 4268	2816	rundll32.exe	98
PID 2816 wrote to memory of 4268	2816	rundll32.exe	98
PID 4268 wrote to memory of 1072	4268	rundll32.exe	100
PID 4268 wrote to memory of 1072	4268	rundll32.exe	100
PID 4268 wrote to memory of 1072	4268	rundll32.exe	100
PID 1072 wrote to memory of 972	1072	rundll32.exe	101
PID 1072 wrote to memory of 972	1072	rundll32.exe	101
PID 1072 wrote to memory of 972	1072	rundll32.exe	101
PID 972 wrote to memory of 3344	972	rundll32.exe	102
PID 972 wrote to memory of 3344	972	rundll32.exe	102
PID 972 wrote to memory of 3344	972	rundll32.exe	102
PID 3344 wrote to memory of 2556	3344	rundll32.exe	103
PID 3344 wrote to memory of 2556	3344	rundll32.exe	103
PID 3344 wrote to memory of 2556	3344	rundll32.exe	103
PID 2556 wrote to memory of 2984	2556	rundll32.exe	104
PID 2556 wrote to memory of 2984	2556	rundll32.exe	104
PID 2556 wrote to memory of 2984	2556	rundll32.exe	104
PID 2984 wrote to memory of 2044	2984	rundll32.exe	105

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1268
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3608
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2836
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5080
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4452
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:2060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:1772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:5012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:2816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:1072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:2984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        23⤵
        
        PID:2044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        24⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        25⤵
        
        PID:2456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        26⤵
        
        PID:220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        27⤵
        
        PID:2036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        28⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        29⤵
        
        PID:2888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        30⤵
        
        PID:2768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        31⤵
        
        PID:2876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        32⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        33⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        34⤵
        
        PID:3984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        35⤵
        
        PID:4556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        36⤵
        
        PID:1152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        37⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        38⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        39⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        40⤵
        
        PID:3964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        41⤵
        
        PID:4752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        42⤵
        
        PID:3996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        43⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        44⤵
        
        PID:2412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        45⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        46⤵
        
        PID:1984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        47⤵
        
        PID:1596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        48⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        49⤵
        
        PID:3340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        50⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        51⤵
        
        PID:4624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        52⤵
        
        PID:4020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        53⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        54⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        55⤵
        
        PID:2528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        56⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        57⤵
        
        PID:2316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        58⤵
        
        PID:2416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        59⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        60⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        61⤵
        
        PID:4724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        62⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        63⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        64⤵
        
        PID:2692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        65⤵
        
        PID:2312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        66⤵
        
        PID:4528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        67⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        68⤵
        
        PID:2952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        69⤵
        
        PID:1636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        70⤵
        
        PID:3048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        71⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        72⤵
        
        PID:2576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        73⤵
        
        PID:1364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        74⤵
        
        PID:1012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        75⤵
        
        PID:848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        76⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        77⤵
        
        PID:3364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        78⤵
        
        PID:3152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        79⤵
        
        PID:460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        80⤵
        
        PID:228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        81⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        82⤵
        
        PID:3020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        83⤵
        
        PID:1888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        84⤵
        
        PID:4656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        85⤵
        
        PID:4208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        86⤵
        
        PID:584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        87⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        88⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        89⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        90⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        91⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        92⤵
        
        PID:3024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        93⤵
        
        PID:3576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        94⤵
        
        PID:672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        95⤵
        
        PID:684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        96⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        97⤵
        
        PID:904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        98⤵
        
        PID:1136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        99⤵
        
        PID:4012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        100⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        101⤵
        
        PID:2164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        102⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        103⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        104⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        105⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        106⤵
        
        PID:2996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        107⤵
        
        PID:3012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        108⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        109⤵
        
        PID:2444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        110⤵
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        111⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        112⤵
        
        PID:900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        113⤵
        
        PID:3080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        114⤵
        
        PID:4044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        115⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        116⤵
        
        PID:852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        117⤵
        
        PID:3412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        118⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        119⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        120⤵
        
        PID:5156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        121⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        122⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        123⤵
        
        PID:5196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        124⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        125⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        126⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        127⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        128⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        129⤵
        
        PID:5288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        130⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        131⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        132⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        133⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        134⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        135⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        136⤵
        
        PID:5384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        137⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        138⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        139⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        140⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        141⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        142⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        143⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        144⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        145⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        146⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        147⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        148⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        149⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        150⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        151⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        152⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        153⤵
        
        PID:5620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        154⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        155⤵
        
        PID:5648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        156⤵
        
        PID:5664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        157⤵
        
        PID:5680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        158⤵
        
        PID:5696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        159⤵
        
        PID:5708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        160⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        161⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        162⤵
        
        PID:5748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        163⤵
        
        PID:5764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        164⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        165⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        166⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        167⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        168⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        169⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        170⤵
        
        PID:5864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        171⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        172⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        173⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        174⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        175⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        176⤵
        
        PID:5944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        177⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        178⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        179⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        180⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        181⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        182⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        183⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        184⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        185⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        186⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        187⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        188⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        189⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        190⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        191⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        192⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        193⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        194⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        195⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        196⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        197⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        198⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        199⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        200⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        201⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        202⤵
        
        PID:6344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        203⤵
        
        PID:6360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        204⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        205⤵
        
        PID:6388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        206⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        207⤵
        
        PID:6416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        208⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        209⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        210⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        211⤵
        
        PID:6476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        212⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        213⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        214⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        215⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        216⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        217⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        218⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        219⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        220⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        221⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        222⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        223⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        224⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        225⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        226⤵
        
        PID:6704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        227⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        228⤵
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        229⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        230⤵
        
        PID:6768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        231⤵
        
        PID:6780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        232⤵
        
        PID:6800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        233⤵
        
        PID:6812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        234⤵
        
        PID:6824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        235⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        236⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        237⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        238⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        239⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        240⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        241⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        242⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        243⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        244⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        245⤵
        
        PID:6992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        246⤵
        
        PID:7008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        247⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        248⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        249⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        250⤵
        
        PID:7072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        251⤵
        
        PID:7088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        252⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        253⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        254⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        255⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        256⤵
        
        PID:7160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        257⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        258⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        259⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        260⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        261⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        262⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        263⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        264⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        265⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        266⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        267⤵
        
        PID:7316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        268⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        269⤵
        
        PID:7348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        270⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        271⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        272⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        273⤵
        
        PID:7412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        274⤵
        
        PID:7428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        275⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        276⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        277⤵
        
        PID:7472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        278⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        279⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        280⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        281⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        282⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        283⤵
        
        PID:7568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        284⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        285⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        286⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        287⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        288⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        289⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        290⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        291⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        292⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        293⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        294⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        295⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        296⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        297⤵
        
        PID:7796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        298⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        299⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        300⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        301⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        302⤵
        
        PID:7872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        303⤵
        
        PID:7888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        304⤵
        
        PID:7904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        305⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        306⤵
        
        PID:7932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        307⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        308⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        309⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        310⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        311⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        312⤵
        
        PID:8020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        313⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        314⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        315⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        316⤵
        
        PID:8072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        317⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        318⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        319⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        320⤵
        
        PID:8132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        321⤵
        
        PID:8148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        322⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        323⤵
        
        PID:8180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        324⤵
        
        PID:7060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        325⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        326⤵
        
        PID:8216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        327⤵
        
        PID:8232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        328⤵
        
        PID:8244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        329⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        330⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        331⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        332⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        333⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        334⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        335⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        336⤵
        
        PID:8364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        337⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        338⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        339⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        340⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        341⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        342⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        343⤵
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        344⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        345⤵
        
        PID:8500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        346⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        347⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        348⤵
        
        PID:8552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        349⤵
        
        PID:8568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        350⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        351⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        352⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        353⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        354⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        355⤵
        
        PID:8664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        356⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        357⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        358⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        359⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        360⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        361⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        362⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        363⤵
        
        PID:8772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        364⤵
        
        PID:8788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        365⤵
        
        PID:8804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        366⤵
        
        PID:8820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        367⤵
        
        PID:8832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        368⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        369⤵
        
        PID:8864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        370⤵
        
        PID:8876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        371⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        372⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        373⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        374⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        375⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        376⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        377⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        378⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        379⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        380⤵
        
        PID:9008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        381⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        382⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        383⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        384⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        385⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        386⤵
        
        PID:9100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        387⤵
        
        PID:9112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        388⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        389⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        390⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        391⤵
        
        PID:9164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        392⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        393⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        394⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        395⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        396⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        397⤵
        
        PID:9248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        398⤵
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        399⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        400⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        401⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        402⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        403⤵
        
        PID:9332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        404⤵
        
        PID:9348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        405⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        406⤵
        
        PID:9380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        407⤵
        
        PID:9396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        408⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        409⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        410⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        411⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        412⤵
        
        PID:9468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        413⤵
        
        PID:9484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        414⤵
        
        PID:9500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        415⤵
        
        PID:9520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        416⤵
        
        PID:9532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        417⤵
        
        PID:9548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        418⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        419⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        420⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        421⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        422⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        423⤵
        
        PID:9668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        424⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        425⤵
        
        PID:9700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        426⤵
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        427⤵
        
        PID:9728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        428⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        429⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        430⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        431⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        432⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        433⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        434⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        435⤵
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        436⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        437⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        438⤵
        
        PID:9896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        439⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        440⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        441⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        442⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        443⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        444⤵
        
        PID:9992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        445⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        446⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        447⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        448⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        449⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        450⤵
        
        PID:10084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        451⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        452⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        453⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        454⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        455⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        456⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        457⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        458⤵
        
        PID:10204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        459⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        460⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        461⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        462⤵
        
        PID:10248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        463⤵
        
        PID:10264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        464⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        465⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        466⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        467⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        468⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        469⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        470⤵
        
        PID:10368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        471⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        472⤵
        
        PID:10396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        473⤵
        
        PID:10412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        474⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        475⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        476⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        477⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        478⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        479⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        480⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        481⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        482⤵
        
        PID:10544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        483⤵
        
        PID:10560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        484⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        485⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        486⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        487⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        488⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        489⤵
        
        PID:10660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        490⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        491⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        492⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        493⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        494⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        495⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        496⤵
        
        PID:10764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        497⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        498⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        499⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        500⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        501⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        502⤵
        
        PID:10844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        503⤵
        
        PID:10860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        504⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        505⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        506⤵
        
        PID:10900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        507⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        508⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        509⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        510⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        511⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        512⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        513⤵
        
        PID:11000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        514⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        515⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        516⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        517⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        518⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        519⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        520⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        521⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        522⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        523⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        524⤵
        
        PID:11160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        525⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        526⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        527⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        528⤵
        
        PID:11228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        529⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        530⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        531⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        532⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        533⤵
        
        PID:11292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        534⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        535⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        536⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        537⤵
        
        PID:11348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        538⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        539⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        540⤵
        
        PID:11392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        541⤵
        
        PID:11404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        542⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        543⤵
        
        PID:11436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        544⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        545⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        546⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        547⤵
        
        PID:11492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        548⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        549⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        550⤵
        
        PID:11528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        551⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        552⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        553⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        554⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        555⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        556⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        557⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        558⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        559⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        560⤵
        
        PID:11680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        561⤵
        
        PID:11696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        562⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        563⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        564⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        565⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        566⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        567⤵
        
        PID:11784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        568⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        569⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        570⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        571⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        572⤵
        
        PID:11860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        573⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        574⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        575⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        576⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        577⤵
        
        PID:11928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        578⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        579⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        580⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        581⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        582⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        583⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        584⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        585⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        586⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        587⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        588⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        589⤵
        
        PID:12096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        590⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        591⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        592⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        593⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        594⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        595⤵
        
        PID:12172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        596⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        597⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        598⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        599⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        600⤵
        
        PID:12236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        601⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        602⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        603⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        604⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        605⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        606⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        607⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        608⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        609⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        610⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        611⤵
        
        PID:12408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        612⤵
        
        PID:12424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        613⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        614⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        615⤵
        
        PID:12468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        616⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        617⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        618⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        619⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        620⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        621⤵
        
        PID:12564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        622⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        623⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        624⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        625⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        626⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        627⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        628⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        629⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        630⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        631⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        632⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        633⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        634⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        635⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        636⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        637⤵
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        638⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        639⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        640⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        641⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        642⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        643⤵
        
        PID:12912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        644⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        645⤵
        
        PID:12940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        646⤵
        
        PID:12960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        647⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        648⤵
        
        PID:12992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        649⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        650⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        651⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        652⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        653⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        654⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        655⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        656⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        657⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        658⤵
        
        PID:13152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        659⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        660⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        661⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        662⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        663⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        664⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        665⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        666⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        667⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        668⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        669⤵
        
        PID:13328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        670⤵
        
        PID:13344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        671⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        672⤵
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        673⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        674⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        675⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        676⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        677⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        678⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        679⤵
        
        PID:13472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        680⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        681⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        682⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        683⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        684⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        685⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        686⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        687⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        688⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        689⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        690⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        691⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        692⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        693⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        694⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        695⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        696⤵
        
        PID:13724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        697⤵
        
        PID:13740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        698⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        699⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        700⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        701⤵
        
        PID:13804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        702⤵
        
        PID:13820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        703⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        704⤵
        
        PID:13852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        705⤵
        
        PID:13868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        706⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        707⤵
        
        PID:13900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        708⤵
        
        PID:13916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        709⤵
        
        PID:13932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        710⤵
        
        PID:13944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        711⤵
        
        PID:13960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        712⤵
        
        PID:13976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        713⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        714⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        715⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        716⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        717⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        718⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        719⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        720⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        721⤵
        
        PID:14116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        722⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        723⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        724⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        725⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        726⤵
        
        PID:14192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        727⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        728⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        729⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        730⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        731⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        732⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        733⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        734⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        735⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        736⤵
        
        PID:14352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        737⤵
        
        PID:14364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        738⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        739⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        740⤵
        
        PID:14408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        741⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        742⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        743⤵
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        744⤵
        
        PID:14464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        745⤵
        
        PID:14480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        746⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        747⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        748⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        749⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        750⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        751⤵
        
        PID:14572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        752⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        753⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        754⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        755⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        756⤵
        
        PID:14648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        757⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        758⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        759⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        760⤵
        
        PID:14712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        761⤵
        
        PID:14728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        762⤵
        
        PID:14744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        763⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        764⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        765⤵
        
        PID:14788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        766⤵
        
        PID:14804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        767⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        768⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        769⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        770⤵
        
        PID:14860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        771⤵
        
        PID:14872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        772⤵
        
        PID:14888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        773⤵
        
        PID:14900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        774⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        775⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        776⤵
        
        PID:14952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        777⤵
        
        PID:14968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        778⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        779⤵
        
        PID:15000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        780⤵
        
        PID:15012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        781⤵
        
        PID:15028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        782⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        783⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        784⤵
        
        PID:15068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        785⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        786⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        787⤵
        
        PID:15104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        788⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        789⤵
        
        PID:15136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        790⤵
        
        PID:15152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        791⤵
        
        PID:15172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        792⤵
        
        PID:15184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        793⤵
        
        PID:15200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        794⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        795⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        796⤵
        
        PID:15248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        797⤵
        
        PID:15264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        798⤵
        
        PID:15280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        799⤵
        
        PID:15296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        800⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        801⤵
        
        PID:15324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        802⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        803⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        804⤵
        
        PID:4332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        805⤵
        
        PID:3320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        806⤵
        
        PID:15364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        807⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        808⤵
        
        PID:15396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        809⤵
        
        PID:15412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        810⤵
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        811⤵
        
        PID:15444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        812⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        813⤵
        
        PID:15476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        814⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        815⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        816⤵
        
        PID:15520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        817⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        818⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        819⤵
        
        PID:15564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        820⤵
        
        PID:15580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        821⤵
        
        PID:15596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        822⤵
        
        PID:15612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        823⤵
        
        PID:15628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        824⤵
        
        PID:15648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        825⤵
        
        PID:15664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        826⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        827⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        828⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        829⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        830⤵
        
        PID:15744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        831⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        832⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        833⤵
        
        PID:15792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        834⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        835⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        836⤵
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        837⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        838⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        839⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        840⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        841⤵
        
        PID:15920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        842⤵
        
        PID:15932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        843⤵
        
        PID:15948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        844⤵
        
        PID:15964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        845⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        846⤵
        
        PID:15996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        847⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        848⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        849⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        850⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        851⤵
        
        PID:16068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        852⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        853⤵
        
        PID:16100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        854⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        855⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        856⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        857⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        858⤵
        
        PID:16184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        859⤵
        
        PID:16200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        860⤵
        
        PID:16212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        861⤵
        
        PID:16228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        862⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        863⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        864⤵
        
        PID:16280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        865⤵
        
        PID:16296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        866⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        867⤵
        
        PID:16324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        868⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        869⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        870⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        871⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        872⤵
        
        PID:4668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        873⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        874⤵
        
        PID:3276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        875⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        876⤵
        
        PID:1352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        877⤵
        
        PID:16108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        878⤵
        
        PID:4644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        879⤵
        
        PID:3636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        880⤵
        
        PID:3284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        881⤵
        
        PID:1812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        882⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        883⤵
        
        PID:2304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        884⤵
        
        PID:16400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        885⤵
        
        PID:16412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        886⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        887⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        888⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        889⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        890⤵
        
        PID:16484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        891⤵
        
        PID:16500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        892⤵
        
        PID:16516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\32c5c0882814034e7e2292fc82462379_JaffaCakes118.dll,#1
        893⤵
        
        PID:16532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/16500-0-0x0000000075670000-0x00000000758F4000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads