923a199f9e75d8ef88daa5cf774fed8e4e1a86c203992b225121d4fae6046e6c

Analysis

max time kernel
94s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 21:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll
Size

172KB
MD5

3ee1fb4ffd47c9e2a0b646e4238a1a6e
SHA1

7497e4fc354e8baf4c92d0d68c97afc884af9ef1
SHA256

923a199f9e75d8ef88daa5cf774fed8e4e1a86c203992b225121d4fae6046e6c
SHA512

5da4e5b002a54cf8f48285a5031ed00cc5c73a260efc3a9aa6d70aa69cafbbbcfa0090f966156bac2da9c0abbb0ea9aab8a3c49a4f61d0f6845031c4590a512e
SSDEEP

3072:z77oqWC77oqWC77oqWC77oqWC77oqWC77oqWC77oqWC77oqWC7q:DrrrrrrrC

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 4500	2224	rundll32.exe	83
PID 2224 wrote to memory of 4500	2224	rundll32.exe	83
PID 2224 wrote to memory of 4500	2224	rundll32.exe	83
PID 4500 wrote to memory of 2228	4500	rundll32.exe	85
PID 4500 wrote to memory of 2228	4500	rundll32.exe	85
PID 4500 wrote to memory of 2228	4500	rundll32.exe	85
PID 2228 wrote to memory of 5096	2228	rundll32.exe	86
PID 2228 wrote to memory of 5096	2228	rundll32.exe	86
PID 2228 wrote to memory of 5096	2228	rundll32.exe	86
PID 5096 wrote to memory of 1236	5096	rundll32.exe	88
PID 5096 wrote to memory of 1236	5096	rundll32.exe	88
PID 5096 wrote to memory of 1236	5096	rundll32.exe	88
PID 1236 wrote to memory of 3092	1236	rundll32.exe	89
PID 1236 wrote to memory of 3092	1236	rundll32.exe	89
PID 1236 wrote to memory of 3092	1236	rundll32.exe	89
PID 3092 wrote to memory of 3976	3092	rundll32.exe	91
PID 3092 wrote to memory of 3976	3092	rundll32.exe	91
PID 3092 wrote to memory of 3976	3092	rundll32.exe	91
PID 3976 wrote to memory of 1568	3976	rundll32.exe	92
PID 3976 wrote to memory of 1568	3976	rundll32.exe	92
PID 3976 wrote to memory of 1568	3976	rundll32.exe	92
PID 1568 wrote to memory of 116	1568	rundll32.exe	93
PID 1568 wrote to memory of 116	1568	rundll32.exe	93
PID 1568 wrote to memory of 116	1568	rundll32.exe	93
PID 116 wrote to memory of 3316	116	rundll32.exe	94
PID 116 wrote to memory of 3316	116	rundll32.exe	94
PID 116 wrote to memory of 3316	116	rundll32.exe	94
PID 3316 wrote to memory of 1604	3316	rundll32.exe	95
PID 3316 wrote to memory of 1604	3316	rundll32.exe	95
PID 3316 wrote to memory of 1604	3316	rundll32.exe	95
PID 1604 wrote to memory of 3164	1604	rundll32.exe	96
PID 1604 wrote to memory of 3164	1604	rundll32.exe	96
PID 1604 wrote to memory of 3164	1604	rundll32.exe	96
PID 3164 wrote to memory of 3944	3164	rundll32.exe	97
PID 3164 wrote to memory of 3944	3164	rundll32.exe	97
PID 3164 wrote to memory of 3944	3164	rundll32.exe	97
PID 3944 wrote to memory of 2884	3944	rundll32.exe	98
PID 3944 wrote to memory of 2884	3944	rundll32.exe	98
PID 3944 wrote to memory of 2884	3944	rundll32.exe	98
PID 2884 wrote to memory of 4408	2884	rundll32.exe	99
PID 2884 wrote to memory of 4408	2884	rundll32.exe	99
PID 2884 wrote to memory of 4408	2884	rundll32.exe	99
PID 4408 wrote to memory of 2748	4408	rundll32.exe	100
PID 4408 wrote to memory of 2748	4408	rundll32.exe	100
PID 4408 wrote to memory of 2748	4408	rundll32.exe	100
PID 2748 wrote to memory of 2000	2748	rundll32.exe	101
PID 2748 wrote to memory of 2000	2748	rundll32.exe	101
PID 2748 wrote to memory of 2000	2748	rundll32.exe	101
PID 2000 wrote to memory of 2052	2000	rundll32.exe	102
PID 2000 wrote to memory of 2052	2000	rundll32.exe	102
PID 2000 wrote to memory of 2052	2000	rundll32.exe	102
PID 2052 wrote to memory of 796	2052	rundll32.exe	103
PID 2052 wrote to memory of 796	2052	rundll32.exe	103
PID 2052 wrote to memory of 796	2052	rundll32.exe	103
PID 796 wrote to memory of 3068	796	rundll32.exe	104
PID 796 wrote to memory of 3068	796	rundll32.exe	104
PID 796 wrote to memory of 3068	796	rundll32.exe	104
PID 3068 wrote to memory of 2660	3068	rundll32.exe	105
PID 3068 wrote to memory of 2660	3068	rundll32.exe	105
PID 3068 wrote to memory of 2660	3068	rundll32.exe	105
PID 2660 wrote to memory of 3752	2660	rundll32.exe	106
PID 2660 wrote to memory of 3752	2660	rundll32.exe	106
PID 2660 wrote to memory of 3752	2660	rundll32.exe	106
PID 3752 wrote to memory of 1800	3752	rundll32.exe	107

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4500
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2228
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5096
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1236
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:1568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:3316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:1604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:2748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:2052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:3752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        23⤵
        
        PID:1800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        24⤵
        
        PID:3212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        25⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        26⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        27⤵
        
        PID:4144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        28⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        29⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        30⤵
        
        PID:748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        31⤵
        
        PID:3360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        32⤵
        
        PID:3052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        33⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        34⤵
        
        PID:4796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        35⤵
        
        PID:3720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        36⤵
        
        PID:1476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        37⤵
        
        PID:3404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        38⤵
        
        PID:4512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        39⤵
        
        PID:436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        40⤵
        
        PID:3000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        41⤵
        
        PID:2268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        42⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        43⤵
        
        PID:4484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        44⤵
        
        PID:2344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        45⤵
        
        PID:2372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        46⤵
        
        PID:1404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        47⤵
        
        PID:2472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        48⤵
        
        PID:2548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        49⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        50⤵
        
        PID:3704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        51⤵
        
        PID:3516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        52⤵
        
        PID:2784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        53⤵
        
        PID:520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        54⤵
        
        PID:396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        55⤵
        
        PID:2428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        56⤵
        
        PID:2392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        57⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        58⤵
        
        PID:4388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        59⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        60⤵
        
        PID:4568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        61⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        62⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        63⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        64⤵
        
        PID:828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        65⤵
        
        PID:4948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        66⤵
        
        PID:3592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        67⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        68⤵
        
        PID:2848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        69⤵
        
        PID:5100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        70⤵
        
        PID:4176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        71⤵
        
        PID:2072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        72⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        73⤵
        
        PID:1940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        74⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        75⤵
        
        PID:4336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        76⤵
        
        PID:1728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        77⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        78⤵
        
        PID:3320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        79⤵
        
        PID:676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        80⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        81⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        82⤵
        
        PID:3280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        83⤵
        
        PID:556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        84⤵
        
        PID:3020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        85⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        86⤵
        
        PID:4156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        87⤵
        
        PID:1704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        88⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        89⤵
        
        PID:4592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        90⤵
        
        PID:680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        91⤵
        
        PID:1884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        92⤵
        
        PID:624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        93⤵
        
        PID:1324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        94⤵
        
        PID:3712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        95⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        96⤵
        
        PID:628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        97⤵
        
        PID:112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        98⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        99⤵
        
        PID:3988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        100⤵
        
        PID:5136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        101⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        102⤵
        
        PID:5180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        103⤵
        
        PID:5204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        104⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        105⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        106⤵
        
        PID:5264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        107⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        108⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        109⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        110⤵
        
        PID:5360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        111⤵
        
        PID:5376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        112⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        113⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        114⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        115⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        116⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        117⤵
        
        PID:5492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        118⤵
        
        PID:5516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        119⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        120⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        121⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        122⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        123⤵
        
        PID:5616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        124⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        125⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        126⤵
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        127⤵
        
        PID:5692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        128⤵
        
        PID:5708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        129⤵
        
        PID:5724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        130⤵
        
        PID:5740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        131⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        132⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        133⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        134⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        135⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        136⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        137⤵
        
        PID:5900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        138⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        139⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        140⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        141⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        142⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        143⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        144⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        145⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        146⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        147⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        148⤵
        
        PID:6132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        149⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        150⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        151⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        152⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        153⤵
        
        PID:652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        154⤵
        
        PID:4272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        155⤵
        
        PID:3124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        156⤵
        
        PID:760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        157⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        158⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        159⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        160⤵
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        161⤵
        
        PID:5764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        162⤵
        
        PID:5828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        163⤵
        
        PID:5908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        164⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        165⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        166⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        167⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        168⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        169⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        170⤵
        
        PID:4192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        171⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        172⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        173⤵
        
        PID:5664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        174⤵
        
        PID:780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        175⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        176⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        177⤵
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        178⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        179⤵
        
        PID:6180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        180⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        181⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        182⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        183⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        184⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        185⤵
        
        PID:6268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        186⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        187⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        188⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        189⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        190⤵
        
        PID:6344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        191⤵
        
        PID:6356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        192⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        193⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        194⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        195⤵
        
        PID:6416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        196⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        197⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        198⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        199⤵
        
        PID:6480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        200⤵
        
        PID:6492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        201⤵
        
        PID:6508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        202⤵
        
        PID:6524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        203⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        204⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        205⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        206⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        207⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        208⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        209⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        210⤵
        
        PID:6640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        211⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        212⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        213⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        214⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        215⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        216⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        217⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        218⤵
        
        PID:6756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        219⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        220⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        221⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        222⤵
        
        PID:6816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        223⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        224⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        225⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        226⤵
        
        PID:6880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        227⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        228⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        229⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        230⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        231⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        232⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        233⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        234⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        235⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        236⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        237⤵
        
        PID:7048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        238⤵
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        239⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        240⤵
        
        PID:7096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        241⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        242⤵
        
        PID:7128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        243⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        244⤵
        
        PID:7160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        245⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        246⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        247⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        248⤵
        
        PID:4324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        249⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        250⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        251⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        252⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        253⤵
        
        PID:7208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        254⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        255⤵
        
        PID:7236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        256⤵
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        257⤵
        
        PID:7264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        258⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        259⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        260⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        261⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        262⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        263⤵
        
        PID:7356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        264⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        265⤵
        
        PID:7384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        266⤵
        
        PID:7400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        267⤵
        
        PID:7416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        268⤵
        
        PID:7428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        269⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        270⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        271⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        272⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        273⤵
        
        PID:7508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        274⤵
        
        PID:7524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        275⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        276⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        277⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        278⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        279⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        280⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        281⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        282⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        283⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        284⤵
        
        PID:7672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        285⤵
        
        PID:7688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        286⤵
        
        PID:7700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        287⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        288⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        289⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        290⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        291⤵
        
        PID:7776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        292⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        293⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        294⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        295⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        296⤵
        
        PID:7856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        297⤵
        
        PID:7872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        298⤵
        
        PID:7888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        299⤵
        
        PID:7900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        300⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        301⤵
        
        PID:7932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        302⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        303⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        304⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        305⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        306⤵
        
        PID:8000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        307⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        308⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        309⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        310⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        311⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        312⤵
        
        PID:8092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        313⤵
        
        PID:8108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        314⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        315⤵
        
        PID:8140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        316⤵
        
        PID:8152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        317⤵
        
        PID:8168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        318⤵
        
        PID:8180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        319⤵
        
        PID:6764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        320⤵
        
        PID:804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        321⤵
        
        PID:2968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        322⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        323⤵
        
        PID:8216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        324⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        325⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        326⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        327⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        328⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        329⤵
        
        PID:8320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        330⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        331⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        332⤵
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        333⤵
        
        PID:8376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        334⤵
        
        PID:8392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        335⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        336⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        337⤵
        
        PID:8436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        338⤵
        
        PID:8452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        339⤵
        
        PID:8464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        340⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        341⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        342⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        343⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        344⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        345⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        346⤵
        
        PID:8576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        347⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        348⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        349⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        350⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        351⤵
        
        PID:8644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        352⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        353⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        354⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        355⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        356⤵
        
        PID:8724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        357⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        358⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        359⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        360⤵
        
        PID:8780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        361⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        362⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        363⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        364⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        365⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        366⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        367⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        368⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        369⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        370⤵
        
        PID:8928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        371⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        372⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        373⤵
        
        PID:8976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        374⤵
        
        PID:8988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        375⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        376⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        377⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        378⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        379⤵
        
        PID:9072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        380⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        381⤵
        
        PID:9100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        382⤵
        
        PID:9116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        383⤵
        
        PID:9132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        384⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        385⤵
        
        PID:9164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        386⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        387⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        388⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        389⤵
        
        PID:9228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        390⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        391⤵
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        392⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        393⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        394⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        395⤵
        
        PID:9320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        396⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        397⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        398⤵
        
        PID:9368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        399⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        400⤵
        
        PID:9400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        401⤵
        
        PID:9416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        402⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        403⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        404⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        405⤵
        
        PID:9476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        406⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        407⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        408⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        409⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        410⤵
        
        PID:9556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        411⤵
        
        PID:9572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        412⤵
        
        PID:9588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        413⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        414⤵
        
        PID:9616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        415⤵
        
        PID:9632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        416⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        417⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        418⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        419⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        420⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        421⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        422⤵
        
        PID:9732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        423⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        424⤵
        
        PID:9760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        425⤵
        
        PID:9776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        426⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        427⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        428⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        429⤵
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        430⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        431⤵
        
        PID:9876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        432⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        433⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        434⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        435⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        436⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        437⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        438⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        439⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        440⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        441⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        442⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        443⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        444⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        445⤵
        
        PID:10084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        446⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        447⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        448⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        449⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        450⤵
        
        PID:10156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        451⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        452⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        453⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        454⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        455⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        456⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        457⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        458⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        459⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        460⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        461⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        462⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        463⤵
        
        PID:10348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        464⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        465⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        466⤵
        
        PID:10396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        467⤵
        
        PID:10412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        468⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        469⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        470⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        471⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        472⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        473⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        474⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        475⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        476⤵
        
        PID:10548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        477⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        478⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        479⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        480⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        481⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        482⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        483⤵
        
        PID:10660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        484⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        485⤵
        
        PID:10692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        486⤵
        
        PID:10704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        487⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        488⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        489⤵
        
        PID:10752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        490⤵
        
        PID:10768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        491⤵
        
        PID:10784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        492⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        493⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        494⤵
        
        PID:10832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        495⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        496⤵
        
        PID:10864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        497⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        498⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        499⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        500⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        501⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        502⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        503⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        504⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        505⤵
        
        PID:11004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        506⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        507⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        508⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        509⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        510⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        511⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        512⤵
        
        PID:11112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        513⤵
        
        PID:11128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        514⤵
        
        PID:11144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        515⤵
        
        PID:11160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        516⤵
        
        PID:11176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        517⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        518⤵
        
        PID:11208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        519⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        520⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        521⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        522⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        523⤵
        
        PID:11280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        524⤵
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        525⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        526⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        527⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        528⤵
        
        PID:11360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        529⤵
        
        PID:11376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        530⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        531⤵
        
        PID:11412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        532⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        533⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        534⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        535⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        536⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        537⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        538⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        539⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        540⤵
        
        PID:11548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        541⤵
        
        PID:11564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        542⤵
        
        PID:11580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        543⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        544⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        545⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        546⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        547⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        548⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        549⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        550⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        551⤵
        
        PID:11724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        552⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        553⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        554⤵
        
        PID:11772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        555⤵
        
        PID:11784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        556⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        557⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        558⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        559⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        560⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        561⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        562⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        563⤵
        
        PID:11908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        564⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        565⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        566⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        567⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        568⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        569⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        570⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        571⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        572⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        573⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        574⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        575⤵
        
        PID:12096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        576⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        577⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        578⤵
        
        PID:12140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        579⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        580⤵
        
        PID:12172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        581⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        582⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        583⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        584⤵
        
        PID:12236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        585⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        586⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        587⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        588⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        589⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        590⤵
        
        PID:12332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        591⤵
        
        PID:12348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        592⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        593⤵
        
        PID:12376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        594⤵
        
        PID:12392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        595⤵
        
        PID:12408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        596⤵
        
        PID:12424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        597⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        598⤵
        
        PID:12456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        599⤵
        
        PID:12468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        600⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        601⤵
        
        PID:12496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        602⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        603⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        604⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        605⤵
        
        PID:12552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        606⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        607⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        608⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        609⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        610⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        611⤵
        
        PID:12636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        612⤵
        
        PID:12652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        613⤵
        
        PID:12664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        614⤵
        
        PID:12680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        615⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        616⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        617⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        618⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        619⤵
        
        PID:12744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        620⤵
        
        PID:12760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        621⤵
        
        PID:12776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        622⤵
        
        PID:12792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        623⤵
        
        PID:12808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        624⤵
        
        PID:12824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        625⤵
        
        PID:12840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        626⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        627⤵
        
        PID:12872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        628⤵
        
        PID:12884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        629⤵
        
        PID:12900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        630⤵
        
        PID:12916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        631⤵
        
        PID:12932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        632⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        633⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        634⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        635⤵
        
        PID:12988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        636⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        637⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        638⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        639⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        640⤵
        
        PID:13064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        641⤵
        
        PID:13080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        642⤵
        
        PID:13092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        643⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        644⤵
        
        PID:13124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        645⤵
        
        PID:13140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        646⤵
        
        PID:13152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        647⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        648⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        649⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        650⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        651⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        652⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        653⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        654⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        655⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        656⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        657⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        658⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        659⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        660⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        661⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        662⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        663⤵
        
        PID:13408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        664⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        665⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        666⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        667⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        668⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        669⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        670⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        671⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        672⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        673⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        674⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        675⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        676⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        677⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        678⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        679⤵
        
        PID:13652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        680⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        681⤵
        
        PID:13684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        682⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        683⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        684⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        685⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        686⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        687⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        688⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        689⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        690⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        691⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        692⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        693⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        694⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        695⤵
        
        PID:13904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        696⤵
        
        PID:13920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        697⤵
        
        PID:13932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        698⤵
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        699⤵
        
        PID:13960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        700⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        701⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        702⤵
        
        PID:14000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        703⤵
        
        PID:14016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        704⤵
        
        PID:14028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        705⤵
        
        PID:14040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        706⤵
        
        PID:14056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        707⤵
        
        PID:14072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        708⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        709⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        710⤵
        
        PID:14116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        711⤵
        
        PID:14132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        712⤵
        
        PID:14148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        713⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        714⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        715⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        716⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        717⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        718⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        719⤵
        
        PID:14252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        720⤵
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        721⤵
        
        PID:14284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        722⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        723⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        724⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        725⤵
        
        PID:14332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        726⤵
        
        PID:4332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        727⤵
        
        PID:14344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        728⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        729⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        730⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        731⤵
        
        PID:14408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        732⤵
        
        PID:14424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        733⤵
        
        PID:14440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        734⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        735⤵
        
        PID:14476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        736⤵
        
        PID:14492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        737⤵
        
        PID:14508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        738⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        739⤵
        
        PID:14536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        740⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        741⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        742⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        743⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        744⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        745⤵
        
        PID:14648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        746⤵
        
        PID:14664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        747⤵
        
        PID:14676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        748⤵
        
        PID:14688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        749⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        750⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        751⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        752⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        753⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        754⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        755⤵
        
        PID:14804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        756⤵
        
        PID:14820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        757⤵
        
        PID:14836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        758⤵
        
        PID:14852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        759⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        760⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        761⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        762⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        763⤵
        
        PID:14928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        764⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        765⤵
        
        PID:14960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        766⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        767⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        768⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        769⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        770⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        771⤵
        
        PID:15044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        772⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        773⤵
        
        PID:15072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        774⤵
        
        PID:15084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        775⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        776⤵
        
        PID:15112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        777⤵
        
        PID:15128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        778⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        779⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        780⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        781⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        782⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        783⤵
        
        PID:15224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        784⤵
        
        PID:15240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        785⤵
        
        PID:15256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        786⤵
        
        PID:15272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        787⤵
        
        PID:15288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        788⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        789⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        790⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        791⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        792⤵
        
        PID:4896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        793⤵
        
        PID:5036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        794⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        795⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        796⤵
        
        PID:15396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        797⤵
        
        PID:15412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        798⤵
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        799⤵
        
        PID:15444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        800⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        801⤵
        
        PID:15476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        802⤵
        
        PID:15492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        803⤵
        
        PID:15508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        804⤵
        
        PID:15524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        805⤵
        
        PID:15536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        806⤵
        
        PID:15552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        807⤵
        
        PID:15568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        808⤵
        
        PID:15580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        809⤵
        
        PID:15600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        810⤵
        
        PID:15612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        811⤵
        
        PID:15624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        812⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        813⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        814⤵
        
        PID:15668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        815⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        816⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        817⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        818⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        819⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        820⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        821⤵
        
        PID:15780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        822⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        823⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        824⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        825⤵
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        826⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        827⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        828⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        829⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        830⤵
        
        PID:15916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        831⤵
        
        PID:15936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        832⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        833⤵
        
        PID:15964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        834⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        835⤵
        
        PID:15996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        836⤵
        
        PID:16012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        837⤵
        
        PID:16028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        838⤵
        
        PID:16044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        839⤵
        
        PID:16060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        840⤵
        
        PID:16076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        841⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        842⤵
        
        PID:16108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        843⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        844⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        845⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        846⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        847⤵
        
        PID:16184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        848⤵
        
        PID:16200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        849⤵
        
        PID:16216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        850⤵
        
        PID:16232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        851⤵
        
        PID:16248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        852⤵
        
        PID:16264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        853⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        854⤵
        
        PID:16292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        855⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        856⤵
        
        PID:16320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        857⤵
        
        PID:16336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        858⤵
        
        PID:16348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        859⤵
        
        PID:16364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        860⤵
        
        PID:16380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        861⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        862⤵
        
        PID:16396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        863⤵
        
        PID:16412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        864⤵
        
        PID:16428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        865⤵
        
        PID:16444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        866⤵
        
        PID:16460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        867⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        868⤵
        
        PID:16488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee1fb4ffd47c9e2a0b646e4238a1a6e_JaffaCakes118.dll,#1
        869⤵
        
        PID:16504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/116-8-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/116-73-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/436-30-0x0000000000940000-0x00000000009B3000-memory.dmp

Filesize
460KB

Download
memory/436-29-0x0000000000940000-0x00000000009B3000-memory.dmp

Filesize
460KB

Download
memory/520-40-0x0000000000680000-0x00000000006F3000-memory.dmp

Filesize
460KB

Download
memory/520-41-0x0000000000680000-0x00000000006F3000-memory.dmp

Filesize
460KB

Download
memory/556-64-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/556-65-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/676-60-0x0000000000600000-0x0000000000673000-memory.dmp

Filesize
460KB

Download
memory/676-61-0x0000000000600000-0x0000000000673000-memory.dmp

Filesize
460KB

Download
memory/748-23-0x0000000000600000-0x0000000000673000-memory.dmp

Filesize
460KB

Download
memory/748-22-0x0000000000600000-0x0000000000673000-memory.dmp

Filesize
460KB

Download
memory/796-83-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/796-15-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/828-49-0x00000000009A0000-0x0000000000A13000-memory.dmp

Filesize
460KB

Download
memory/1164-44-0x00000000021D0000-0x0000000002243000-memory.dmp

Filesize
460KB

Download
memory/1164-43-0x00000000021D0000-0x0000000002243000-memory.dmp

Filesize
460KB

Download
memory/1236-69-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1236-4-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1476-26-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1568-7-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1568-72-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1584-57-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1604-75-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1604-10-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1708-32-0x00000000009E0000-0x0000000000A53000-memory.dmp

Filesize
460KB

Download
memory/1708-31-0x00000000009E0000-0x0000000000A53000-memory.dmp

Filesize
460KB

Download
memory/1728-58-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1732-38-0x0000000000610000-0x0000000000683000-memory.dmp

Filesize
460KB

Download
memory/1732-37-0x0000000000610000-0x0000000000683000-memory.dmp

Filesize
460KB

Download
memory/1800-89-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1800-18-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1848-48-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1940-56-0x0000000002170000-0x00000000021E3000-memory.dmp

Filesize
460KB

Download
memory/2000-14-0x0000000001F80000-0x0000000001FF3000-memory.dmp

Filesize
460KB

Download
memory/2000-81-0x0000000001F80000-0x0000000001FF3000-memory.dmp

Filesize
460KB

Download
memory/2052-82-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2228-1-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2228-66-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2344-33-0x0000000002180000-0x00000000021F3000-memory.dmp

Filesize
460KB

Download
memory/2344-34-0x0000000002180000-0x00000000021F3000-memory.dmp

Filesize
460KB

Download
memory/2372-35-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2428-42-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2548-36-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2660-87-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2748-13-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2748-80-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/2848-53-0x0000000000790000-0x0000000000803000-memory.dmp

Filesize
460KB

Download
memory/2884-78-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3052-24-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3068-85-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/3068-86-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/3068-16-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/3092-5-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3092-70-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3164-76-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3316-9-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3316-74-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3320-59-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3404-27-0x0000000002120000-0x0000000002193000-memory.dmp

Filesize
460KB

Download
memory/3516-39-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3752-17-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3752-88-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3944-11-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3944-77-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3976-71-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/3976-6-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4176-54-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4264-45-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4408-12-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4408-79-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4424-47-0x0000000002250000-0x00000000022C3000-memory.dmp

Filesize
460KB

Download
memory/4436-55-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4500-0-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4500-63-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4512-28-0x0000000000840000-0x00000000008B3000-memory.dmp

Filesize
460KB

Download
memory/4568-46-0x0000000002220000-0x0000000002293000-memory.dmp

Filesize
460KB

Download
memory/4652-90-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4652-19-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4796-25-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4836-20-0x00000000020D0000-0x0000000002143000-memory.dmp

Filesize
460KB

Download
memory/4836-94-0x00000000020D0000-0x0000000002143000-memory.dmp

Filesize
460KB

Download
memory/4836-95-0x00000000020D0000-0x0000000002143000-memory.dmp

Filesize
460KB

Download
memory/4884-21-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4888-62-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/4948-50-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/5096-68-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/5096-3-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/5096-2-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/5096-67-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/5112-52-0x0000000002070000-0x00000000020E3000-memory.dmp

Filesize
460KB

Download
memory/5112-51-0x0000000002070000-0x00000000020E3000-memory.dmp

Filesize
460KB

Download
memory/5136-84-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/5264-92-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/5264-91-0x0000000000350000-0x00000000003C3000-memory.dmp

Filesize
460KB

Download
memory/5280-93-0x0000000002110000-0x0000000002183000-memory.dmp

Filesize
460KB

Download
memory/16428-168-0x00000000751F0000-0x0000000075474000-memory.dmp

Filesize
2.5MB

Download
memory/16444-167-0x00000000751F0000-0x0000000075474000-memory.dmp

Filesize
2.5MB

Download
memory/16460-166-0x00000000751F0000-0x0000000075474000-memory.dmp

Filesize
2.5MB

Download
memory/16472-165-0x00000000751F0000-0x0000000075474000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads