168bfb0b6f2f222004aab65174047390ed03256b7c500eac47da7c0354af2dce

Analysis

max time kernel
92s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 15:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll
Size

38KB
MD5

3546fc08f34341f15e2a1d3f4d8fd02c
SHA1

3d7e9ec1b1c383e38b5fb0ebe1d8ddb720e86553
SHA256

168bfb0b6f2f222004aab65174047390ed03256b7c500eac47da7c0354af2dce
SHA512

4c2671de0fd781375479b71f97971f5099f0e7106e6977e2dab635a3949049d885bab2244960632041d10c87c9ef82b732e8656a97ff6c2139da9bc6d19b12b4
SSDEEP

384:OfpF+Qwa7Df74PWe26NoFChQe+jTU8y1cp9nfWAbnQbzbu//VTN+iFpC:OfpF+QJ71dUQA8y1cTnybu//VTN+iF8

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 3924	2736	rundll32.exe	83
PID 2736 wrote to memory of 3924	2736	rundll32.exe	83
PID 2736 wrote to memory of 3924	2736	rundll32.exe	83
PID 3924 wrote to memory of 4172	3924	rundll32.exe	86
PID 3924 wrote to memory of 4172	3924	rundll32.exe	86
PID 3924 wrote to memory of 4172	3924	rundll32.exe	86
PID 4172 wrote to memory of 1104	4172	rundll32.exe	87
PID 4172 wrote to memory of 1104	4172	rundll32.exe	87
PID 4172 wrote to memory of 1104	4172	rundll32.exe	87
PID 1104 wrote to memory of 1540	1104	rundll32.exe	88
PID 1104 wrote to memory of 1540	1104	rundll32.exe	88
PID 1104 wrote to memory of 1540	1104	rundll32.exe	88
PID 1540 wrote to memory of 4820	1540	rundll32.exe	89
PID 1540 wrote to memory of 4820	1540	rundll32.exe	89
PID 1540 wrote to memory of 4820	1540	rundll32.exe	89
PID 4820 wrote to memory of 1836	4820	rundll32.exe	90
PID 4820 wrote to memory of 1836	4820	rundll32.exe	90
PID 4820 wrote to memory of 1836	4820	rundll32.exe	90
PID 1836 wrote to memory of 2336	1836	rundll32.exe	91
PID 1836 wrote to memory of 2336	1836	rundll32.exe	91
PID 1836 wrote to memory of 2336	1836	rundll32.exe	91
PID 2336 wrote to memory of 3640	2336	rundll32.exe	92
PID 2336 wrote to memory of 3640	2336	rundll32.exe	92
PID 2336 wrote to memory of 3640	2336	rundll32.exe	92
PID 3640 wrote to memory of 444	3640	rundll32.exe	93
PID 3640 wrote to memory of 444	3640	rundll32.exe	93
PID 3640 wrote to memory of 444	3640	rundll32.exe	93
PID 444 wrote to memory of 3244	444	rundll32.exe	94
PID 444 wrote to memory of 3244	444	rundll32.exe	94
PID 444 wrote to memory of 3244	444	rundll32.exe	94
PID 3244 wrote to memory of 3692	3244	rundll32.exe	95
PID 3244 wrote to memory of 3692	3244	rundll32.exe	95
PID 3244 wrote to memory of 3692	3244	rundll32.exe	95
PID 3692 wrote to memory of 3648	3692	rundll32.exe	97
PID 3692 wrote to memory of 3648	3692	rundll32.exe	97
PID 3692 wrote to memory of 3648	3692	rundll32.exe	97
PID 3648 wrote to memory of 3300	3648	rundll32.exe	98
PID 3648 wrote to memory of 3300	3648	rundll32.exe	98
PID 3648 wrote to memory of 3300	3648	rundll32.exe	98
PID 3300 wrote to memory of 2000	3300	rundll32.exe	99
PID 3300 wrote to memory of 2000	3300	rundll32.exe	99
PID 3300 wrote to memory of 2000	3300	rundll32.exe	99
PID 2000 wrote to memory of 4648	2000	rundll32.exe	100
PID 2000 wrote to memory of 4648	2000	rundll32.exe	100
PID 2000 wrote to memory of 4648	2000	rundll32.exe	100
PID 4648 wrote to memory of 4600	4648	rundll32.exe	101
PID 4648 wrote to memory of 4600	4648	rundll32.exe	101
PID 4648 wrote to memory of 4600	4648	rundll32.exe	101
PID 4600 wrote to memory of 1668	4600	rundll32.exe	102
PID 4600 wrote to memory of 1668	4600	rundll32.exe	102
PID 4600 wrote to memory of 1668	4600	rundll32.exe	102
PID 1668 wrote to memory of 1664	1668	rundll32.exe	103
PID 1668 wrote to memory of 1664	1668	rundll32.exe	103
PID 1668 wrote to memory of 1664	1668	rundll32.exe	103
PID 1664 wrote to memory of 228	1664	rundll32.exe	104
PID 1664 wrote to memory of 228	1664	rundll32.exe	104
PID 1664 wrote to memory of 228	1664	rundll32.exe	104
PID 228 wrote to memory of 1576	228	rundll32.exe	105
PID 228 wrote to memory of 1576	228	rundll32.exe	105
PID 228 wrote to memory of 1576	228	rundll32.exe	105
PID 1576 wrote to memory of 2944	1576	rundll32.exe	106
PID 1576 wrote to memory of 2944	1576	rundll32.exe	106
PID 1576 wrote to memory of 2944	1576	rundll32.exe	106
PID 2944 wrote to memory of 3040	2944	rundll32.exe	107

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3924
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4172
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1104
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1540
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:4820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:1836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:2336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:3640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:4648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:1668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:1576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:2944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        23⤵
        
        PID:3040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        24⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        25⤵
        
        PID:1444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        26⤵
        
        PID:4468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        27⤵
        
        PID:3972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        28⤵
        
        PID:4644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        29⤵
        
        PID:2760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        30⤵
        
        PID:4276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        31⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        32⤵
        
        PID:3868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        33⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        34⤵
        
        PID:4496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        35⤵
        
        PID:3832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        36⤵
        
        PID:3572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        37⤵
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        38⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        39⤵
        
        PID:1308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        40⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        41⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        42⤵
        
        PID:3272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        43⤵
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        44⤵
        
        PID:4968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        45⤵
        
        PID:1796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        46⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        47⤵
        
        PID:1344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        48⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        49⤵
        
        PID:2600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        50⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        51⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        52⤵
        
        PID:1276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        53⤵
        
        PID:2152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        54⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        55⤵
        
        PID:4816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        56⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        57⤵
        
        PID:416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        58⤵
        
        PID:1656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        59⤵
        
        PID:2684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        60⤵
        
        PID:1012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        61⤵
        
        PID:2312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        62⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        63⤵
        
        PID:2716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        64⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        65⤵
        
        PID:644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        66⤵
        
        PID:856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        67⤵
        
        PID:2544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        68⤵
        
        PID:628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        69⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        70⤵
        
        PID:2892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        71⤵
        
        PID:1336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        72⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        73⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        74⤵
        
        PID:3928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        75⤵
        
        PID:4416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        76⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        77⤵
        
        PID:3772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        78⤵
        
        PID:920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        79⤵
        
        PID:1520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        80⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        81⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        82⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        83⤵
        
        PID:4596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        84⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        85⤵
        
        PID:1172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        86⤵
        
        PID:2324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        87⤵
        
        PID:4184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        88⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        89⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        90⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        91⤵
        
        PID:4584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        92⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        93⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        94⤵
        
        PID:3580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        95⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        96⤵
        
        PID:3976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        97⤵
        
        PID:896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        98⤵
        
        PID:1424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        99⤵
        
        PID:4984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        100⤵
        
        PID:4488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        101⤵
        
        PID:640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        102⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        103⤵
        
        PID:4016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        104⤵
        
        PID:4048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        105⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        106⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        107⤵
        
        PID:5156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        108⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        109⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        110⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        111⤵
        
        PID:5216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        112⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        113⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        114⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        115⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        116⤵
        
        PID:5288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        117⤵
        
        PID:5304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        118⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        119⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        120⤵
        
        PID:5348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        121⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        122⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        123⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        124⤵
        
        PID:5408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        125⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        126⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        127⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        128⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        129⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        130⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        131⤵
        
        PID:5516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        132⤵
        
        PID:5532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        133⤵
        
        PID:5548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        134⤵
        
        PID:5560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        135⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        136⤵
        
        PID:5592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        137⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        138⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        139⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        140⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        141⤵
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        142⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        143⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        144⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        145⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        146⤵
        
        PID:5740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        147⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        148⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        149⤵
        
        PID:5788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        150⤵
        
        PID:5804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        151⤵
        
        PID:5820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        152⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        153⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        154⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        155⤵
        
        PID:5884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        156⤵
        
        PID:5900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        157⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        158⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        159⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        160⤵
        
        PID:5964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        161⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        162⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        163⤵
        
        PID:6008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        164⤵
        
        PID:6024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        165⤵
        
        PID:6040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        166⤵
        
        PID:6056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        167⤵
        
        PID:6072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        168⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        169⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        170⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        171⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        172⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        173⤵
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        174⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        175⤵
        
        PID:752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        176⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        177⤵
        
        PID:2516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        178⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        179⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        180⤵
        
        PID:6180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        181⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        182⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        183⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        184⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        185⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        186⤵
        
        PID:6268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        187⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        188⤵
        
        PID:6296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        189⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        190⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        191⤵
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        192⤵
        
        PID:6356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        193⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        194⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        195⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        196⤵
        
        PID:6416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        197⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        198⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        199⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        200⤵
        
        PID:6480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        201⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        202⤵
        
        PID:6512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        203⤵
        
        PID:6528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        204⤵
        
        PID:6544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        205⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        206⤵
        
        PID:6576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        207⤵
        
        PID:6588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        208⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        209⤵
        
        PID:6616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        210⤵
        
        PID:6632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        211⤵
        
        PID:6648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        212⤵
        
        PID:6664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        213⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        214⤵
        
        PID:6696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        215⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        216⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        217⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        218⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        219⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        220⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        221⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        222⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        223⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        224⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        225⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        226⤵
        
        PID:6888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        227⤵
        
        PID:6904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        228⤵
        
        PID:6920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        229⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        230⤵
        
        PID:6952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        231⤵
        
        PID:6968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        232⤵
        
        PID:6984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        233⤵
        
        PID:7000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        234⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        235⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        236⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        237⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        238⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        239⤵
        
        PID:7096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        240⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        241⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        242⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        243⤵
        
        PID:7156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        244⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        245⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        246⤵
        
        PID:7196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        247⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        248⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        249⤵
        
        PID:7236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        250⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        251⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        252⤵
        
        PID:7288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        253⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        254⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        255⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        256⤵
        
        PID:7348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        257⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        258⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        259⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        260⤵
        
        PID:7412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        261⤵
        
        PID:7428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        262⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        263⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        264⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        265⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        266⤵
        
        PID:7508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        267⤵
        
        PID:7524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        268⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        269⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        270⤵
        
        PID:7568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        271⤵
        
        PID:7580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        272⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        273⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        274⤵
        
        PID:7624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        275⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        276⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        277⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        278⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        279⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        280⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        281⤵
        
        PID:7724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        282⤵
        
        PID:7740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        283⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        284⤵
        
        PID:7768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        285⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        286⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        287⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        288⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        289⤵
        
        PID:7844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        290⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        291⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        292⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        293⤵
        
        PID:7904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        294⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        295⤵
        
        PID:7928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        296⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        297⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        298⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        299⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        300⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        301⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        302⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        303⤵
        
        PID:8044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        304⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        305⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        306⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        307⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        308⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        309⤵
        
        PID:8140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        310⤵
        
        PID:8156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        311⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        312⤵
        
        PID:8184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        313⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        314⤵
        
        PID:8200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        315⤵
        
        PID:8216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        316⤵
        
        PID:8232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        317⤵
        
        PID:8248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        318⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        319⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        320⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        321⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        322⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        323⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        324⤵
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        325⤵
        
        PID:8376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        326⤵
        
        PID:8392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        327⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        328⤵
        
        PID:8420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        329⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        330⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        331⤵
        
        PID:8468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        332⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        333⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        334⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        335⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        336⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        337⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        338⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        339⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        340⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        341⤵
        
        PID:8612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        342⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        343⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        344⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        345⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        346⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        347⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        348⤵
        
        PID:8724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        349⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        350⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        351⤵
        
        PID:8768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        352⤵
        
        PID:8780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        353⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        354⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        355⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        356⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        357⤵
        
        PID:8852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        358⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        359⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        360⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        361⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        362⤵
        
        PID:8924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        363⤵
        
        PID:8940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        364⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        365⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        366⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        367⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        368⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        369⤵
        
        PID:9024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        370⤵
        
        PID:9040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        371⤵
        
        PID:9056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        372⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        373⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        374⤵
        
        PID:9104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        375⤵
        
        PID:9116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        376⤵
        
        PID:9132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        377⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        378⤵
        
        PID:9164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        379⤵
        
        PID:9176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        380⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        381⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        382⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        383⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        384⤵
        
        PID:9248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        385⤵
        
        PID:9264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        386⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        387⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        388⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        389⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        390⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        391⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        392⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        393⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        394⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        395⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        396⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        397⤵
        
        PID:9448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        398⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        399⤵
        
        PID:9472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        400⤵
        
        PID:9488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        401⤵
        
        PID:9504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        402⤵
        
        PID:9516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        403⤵
        
        PID:9532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        404⤵
        
        PID:9548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        405⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        406⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        407⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        408⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        409⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        410⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        411⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        412⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        413⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        414⤵
        
        PID:9708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        415⤵
        
        PID:9724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        416⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        417⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        418⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        419⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        420⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        421⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        422⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        423⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        424⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        425⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        426⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        427⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        428⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        429⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        430⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        431⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        432⤵
        
        PID:9988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        433⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        434⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        435⤵
        
        PID:10036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        436⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        437⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        438⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        439⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        440⤵
        
        PID:10108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        441⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        442⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        443⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        444⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        445⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        446⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        447⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        448⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        449⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        450⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        451⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        452⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        453⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        454⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        455⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        456⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        457⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        458⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        459⤵
        
        PID:10388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        460⤵
        
        PID:10404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        461⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        462⤵
        
        PID:10436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        463⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        464⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        465⤵
        
        PID:10484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        466⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        467⤵
        
        PID:10516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        468⤵
        
        PID:10528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        469⤵
        
        PID:10548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        470⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        471⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        472⤵
        
        PID:10596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        473⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        474⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        475⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        476⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        477⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        478⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        479⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        480⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        481⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        482⤵
        
        PID:10748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        483⤵
        
        PID:10764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        484⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        485⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        486⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        487⤵
        
        PID:10824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        488⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        489⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        490⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        491⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        492⤵
        
        PID:10900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        493⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        494⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        495⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        496⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        497⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        498⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        499⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        500⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        501⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        502⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        503⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        504⤵
        
        PID:11064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        505⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        506⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        507⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        508⤵
        
        PID:11124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        509⤵
        
        PID:11140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        510⤵
        
        PID:11156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        511⤵
        
        PID:11172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        512⤵
        
        PID:11188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        513⤵
        
        PID:11200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        514⤵
        
        PID:11216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        515⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        516⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        517⤵
        
        PID:10092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        518⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        519⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        520⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        521⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        522⤵
        
        PID:11324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        523⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        524⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        525⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        526⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        527⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        528⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        529⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        530⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        531⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        532⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        533⤵
        
        PID:11492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        534⤵
        
        PID:11508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        535⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        536⤵
        
        PID:11536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        537⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        538⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        539⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        540⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        541⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        542⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        543⤵
        
        PID:11640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        544⤵
        
        PID:11656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        545⤵
        
        PID:11672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        546⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        547⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        548⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        549⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        550⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        551⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        552⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        553⤵
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        554⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        555⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        556⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        557⤵
        
        PID:11860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        558⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        559⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        560⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        561⤵
        
        PID:11920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        562⤵
        
        PID:11936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        563⤵
        
        PID:11948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        564⤵
        
        PID:11964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        565⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        566⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        567⤵
        
        PID:12012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        568⤵
        
        PID:12028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        569⤵
        
        PID:12040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        570⤵
        
        PID:12056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        571⤵
        
        PID:12072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        572⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        573⤵
        
        PID:12104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        574⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        575⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        576⤵
        
        PID:12152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        577⤵
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        578⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        579⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        580⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        581⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        582⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        583⤵
        
        PID:12256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        584⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        585⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        586⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        587⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        588⤵
        
        PID:12324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        589⤵
        
        PID:12340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        590⤵
        
        PID:12352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        591⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        592⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        593⤵
        
        PID:12400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        594⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        595⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        596⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        597⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        598⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        599⤵
        
        PID:12496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        600⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        601⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        602⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        603⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        604⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        605⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        606⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        607⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        608⤵
        
        PID:12636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        609⤵
        
        PID:12652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        610⤵
        
        PID:12668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        611⤵
        
        PID:12684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        612⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        613⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        614⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        615⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        616⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        617⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        618⤵
        
        PID:12792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        619⤵
        
        PID:12812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        620⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        621⤵
        
        PID:12844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        622⤵
        
        PID:12860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        623⤵
        
        PID:12876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        624⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        625⤵
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        626⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        627⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        628⤵
        
        PID:12952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        629⤵
        
        PID:12968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        630⤵
        
        PID:12984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        631⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        632⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        633⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        634⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        635⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        636⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        637⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        638⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        639⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        640⤵
        
        PID:13132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        641⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        642⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        643⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        644⤵
        
        PID:13196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        645⤵
        
        PID:13212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        646⤵
        
        PID:13228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        647⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        648⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        649⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        650⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        651⤵
        
        PID:11980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        652⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        653⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        654⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        655⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        656⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        657⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        658⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        659⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        660⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        661⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        662⤵
        
        PID:13492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        663⤵
        
        PID:13508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        664⤵
        
        PID:13524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        665⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        666⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        667⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        668⤵
        
        PID:13580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        669⤵
        
        PID:13596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        670⤵
        
        PID:13612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        671⤵
        
        PID:13628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        672⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        673⤵
        
        PID:13652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        674⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        675⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        676⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        677⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        678⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        679⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        680⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        681⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        682⤵
        
        PID:13784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        683⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        684⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        685⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        686⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        687⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        688⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        689⤵
        
        PID:13888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        690⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        691⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        692⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        693⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        694⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        695⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        696⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        697⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        698⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        699⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        700⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        701⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        702⤵
        
        PID:14096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        703⤵
        
        PID:14108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        704⤵
        
        PID:14124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        705⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        706⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        707⤵
        
        PID:14172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        708⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        709⤵
        
        PID:14204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        710⤵
        
        PID:14220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        711⤵
        
        PID:14236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        712⤵
        
        PID:14252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        713⤵
        
        PID:14268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        714⤵
        
        PID:14284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        715⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        716⤵
        
        PID:14312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        717⤵
        
        PID:14328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        718⤵
        
        PID:14344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        719⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        720⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        721⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        722⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        723⤵
        
        PID:14416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        724⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        725⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        726⤵
        
        PID:14460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        727⤵
        
        PID:14476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        728⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        729⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        730⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        731⤵
        
        PID:14532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        732⤵
        
        PID:14548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        733⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        734⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        735⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        736⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        737⤵
        
        PID:14628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        738⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        739⤵
        
        PID:14656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        740⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        741⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        742⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        743⤵
        
        PID:14716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        744⤵
        
        PID:14728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        745⤵
        
        PID:14744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        746⤵
        
        PID:14760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        747⤵
        
        PID:14776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        748⤵
        
        PID:14792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        749⤵
        
        PID:14804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        750⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        751⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        752⤵
        
        PID:14844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        753⤵
        
        PID:14860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        754⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        755⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        756⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        757⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        758⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        759⤵
        
        PID:14952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        760⤵
        
        PID:14968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        761⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        762⤵
        
        PID:15000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        763⤵
        
        PID:15012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        764⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        765⤵
        
        PID:15044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        766⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        767⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        768⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        769⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        770⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        771⤵
        
        PID:15136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        772⤵
        
        PID:15152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        773⤵
        
        PID:15168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        774⤵
        
        PID:15184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        775⤵
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        776⤵
        
        PID:15216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        777⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        778⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        779⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        780⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        781⤵
        
        PID:15288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        782⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        783⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        784⤵
        
        PID:15336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        785⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        786⤵
        
        PID:14556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        787⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        788⤵
        
        PID:15392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        789⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        790⤵
        
        PID:15424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        791⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        792⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        793⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        794⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        795⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        796⤵
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        797⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        798⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        799⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        800⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        801⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        802⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        803⤵
        
        PID:15624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        804⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        805⤵
        
        PID:15652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        806⤵
        
        PID:15668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        807⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        808⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        809⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        810⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        811⤵
        
        PID:15740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        812⤵
        
        PID:15752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        813⤵
        
        PID:15772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        814⤵
        
        PID:15784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        815⤵
        
        PID:15800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        816⤵
        
        PID:15816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        817⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        818⤵
        
        PID:15844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        819⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        820⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        821⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        822⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        823⤵
        
        PID:15916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        824⤵
        
        PID:15932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        825⤵
        
        PID:15948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        826⤵
        
        PID:15964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        827⤵
        
        PID:15976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        828⤵
        
        PID:15996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        829⤵
        
        PID:16012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        830⤵
        
        PID:16028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        831⤵
        
        PID:16044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        832⤵
        
        PID:16060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        833⤵
        
        PID:16076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        834⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        835⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        836⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        837⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        838⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        839⤵
        
        PID:16164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        840⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        841⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        842⤵
        
        PID:16212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        843⤵
        
        PID:16224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        844⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        845⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        846⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        847⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        848⤵
        
        PID:16296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        849⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        850⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        851⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        852⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        853⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        854⤵
        
        PID:3988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        855⤵
        
        PID:4088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        856⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        857⤵
        
        PID:16400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        858⤵
        
        PID:16416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        859⤵
        
        PID:16432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        860⤵
        
        PID:16448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        861⤵
        
        PID:16460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        862⤵
        
        PID:16476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        863⤵
        
        PID:16496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        864⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        865⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        866⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        867⤵
        
        PID:16552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        868⤵
        
        PID:16564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        869⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        870⤵
        
        PID:16592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        871⤵
        
        PID:16604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        872⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        873⤵
        
        PID:16636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        874⤵
        
        PID:16648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        875⤵
        
        PID:16664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        876⤵
        
        PID:16680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3546fc08f34341f15e2a1d3f4d8fd02c_JaffaCakes118.dll,#1
        877⤵
        
        PID:16696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/444-8-0x00000000751C0000-0x0000000075444000-memory.dmp

Filesize
2.5MB

Download
memory/3640-7-0x00000000751C0000-0x0000000075444000-memory.dmp

Filesize
2.5MB

Download
memory/3924-0-0x00000000751C0000-0x0000000075444000-memory.dmp

Filesize
2.5MB

Download
memory/4172-1-0x00000000751C0000-0x0000000075444000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads