1e102bdc029c12f0e597d8676b5453cd785bf389c281f777a257efd46f09c2d7

Analysis

max time kernel
145s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 12:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll
Size

6.6MB
MD5

5bfcd9b06d57c79a788db9bbb9ab0f1b
SHA1

14de5ec565c625622d2b039898158f8b4b9980af
SHA256

1e102bdc029c12f0e597d8676b5453cd785bf389c281f777a257efd46f09c2d7
SHA512

1ba207e3a44dceca079941dba61af1d665f81b04b2ca8a3576fe49d772ae936b95136b3fbe9065c015d35f807ec540ef9d1c6a5549964b84f1d7319d1fc22355
SSDEEP

98304:1tTOy/2z7Y9FDxz3ETXwLpju5khqtSaJ8vixbB+pQryqUd:PP9Tpu5khY8vE+yrNs

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

rundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exe

description	pid	Process	procid_target
PID 856 wrote to memory of 3616	856	rundll32.exe	84
PID 856 wrote to memory of 3616	856	rundll32.exe	84
PID 856 wrote to memory of 3616	856	rundll32.exe	84
PID 3616 wrote to memory of 5084	3616	rundll32.exe	85
PID 3616 wrote to memory of 5084	3616	rundll32.exe	85
PID 3616 wrote to memory of 5084	3616	rundll32.exe	85
PID 5084 wrote to memory of 64	5084	rundll32.exe	86
PID 5084 wrote to memory of 64	5084	rundll32.exe	86
PID 5084 wrote to memory of 64	5084	rundll32.exe	86
PID 64 wrote to memory of 4396	64	rundll32.exe	87
PID 64 wrote to memory of 4396	64	rundll32.exe	87
PID 64 wrote to memory of 4396	64	rundll32.exe	87
PID 4396 wrote to memory of 4056	4396	rundll32.exe	88
PID 4396 wrote to memory of 4056	4396	rundll32.exe	88
PID 4396 wrote to memory of 4056	4396	rundll32.exe	88
PID 4056 wrote to memory of 3076	4056	rundll32.exe	89
PID 4056 wrote to memory of 3076	4056	rundll32.exe	89
PID 4056 wrote to memory of 3076	4056	rundll32.exe	89
PID 3076 wrote to memory of 3252	3076	rundll32.exe	90
PID 3076 wrote to memory of 3252	3076	rundll32.exe	90
PID 3076 wrote to memory of 3252	3076	rundll32.exe	90
PID 3252 wrote to memory of 884	3252	rundll32.exe	91
PID 3252 wrote to memory of 884	3252	rundll32.exe	91
PID 3252 wrote to memory of 884	3252	rundll32.exe	91
PID 884 wrote to memory of 620	884	rundll32.exe	92
PID 884 wrote to memory of 620	884	rundll32.exe	92
PID 884 wrote to memory of 620	884	rundll32.exe	92
PID 620 wrote to memory of 3228	620	rundll32.exe	93
PID 620 wrote to memory of 3228	620	rundll32.exe	93
PID 620 wrote to memory of 3228	620	rundll32.exe	93
PID 3228 wrote to memory of 2596	3228	rundll32.exe	94
PID 3228 wrote to memory of 2596	3228	rundll32.exe	94
PID 3228 wrote to memory of 2596	3228	rundll32.exe	94
PID 2596 wrote to memory of 4916	2596	rundll32.exe	95
PID 2596 wrote to memory of 4916	2596	rundll32.exe	95
PID 2596 wrote to memory of 4916	2596	rundll32.exe	95
PID 4916 wrote to memory of 2928	4916	rundll32.exe	97
PID 4916 wrote to memory of 2928	4916	rundll32.exe	97
PID 4916 wrote to memory of 2928	4916	rundll32.exe	97
PID 2928 wrote to memory of 3700	2928	rundll32.exe	98
PID 2928 wrote to memory of 3700	2928	rundll32.exe	98
PID 2928 wrote to memory of 3700	2928	rundll32.exe	98
PID 3700 wrote to memory of 3540	3700	rundll32.exe	99
PID 3700 wrote to memory of 3540	3700	rundll32.exe	99
PID 3700 wrote to memory of 3540	3700	rundll32.exe	99
PID 3540 wrote to memory of 2188	3540	rundll32.exe	100
PID 3540 wrote to memory of 2188	3540	rundll32.exe	100
PID 3540 wrote to memory of 2188	3540	rundll32.exe	100
PID 2188 wrote to memory of 208	2188	rundll32.exe	101
PID 2188 wrote to memory of 208	2188	rundll32.exe	101
PID 2188 wrote to memory of 208	2188	rundll32.exe	101
PID 208 wrote to memory of 4068	208	rundll32.exe	102
PID 208 wrote to memory of 4068	208	rundll32.exe	102
PID 208 wrote to memory of 4068	208	rundll32.exe	102
PID 4068 wrote to memory of 2668	4068	rundll32.exe	103
PID 4068 wrote to memory of 2668	4068	rundll32.exe	103
PID 4068 wrote to memory of 2668	4068	rundll32.exe	103
PID 2668 wrote to memory of 452	2668	rundll32.exe	104
PID 2668 wrote to memory of 452	2668	rundll32.exe	104
PID 2668 wrote to memory of 452	2668	rundll32.exe	104
PID 452 wrote to memory of 5072	452	rundll32.exe	105
PID 452 wrote to memory of 5072	452	rundll32.exe	105
PID 452 wrote to memory of 5072	452	rundll32.exe	105
PID 5072 wrote to memory of 2412	5072	rundll32.exe	107

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:856
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3616
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5084
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:64
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4396
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:4056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:3700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:2668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:5072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        23⤵
        
        PID:2412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        24⤵
        
        PID:2452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        25⤵
        
        PID:2624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        26⤵
        
        PID:548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        27⤵
        
        PID:4468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        28⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        29⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        30⤵
        
        PID:2744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        31⤵
        
        PID:1984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        32⤵
        
        PID:2324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        33⤵
        
        PID:3820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        34⤵
        
        PID:4632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        35⤵
        
        PID:2960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        36⤵
        
        PID:4380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        37⤵
        
        PID:1568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        38⤵
        
        PID:1524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        39⤵
        
        PID:392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        40⤵
        
        PID:3404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        41⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        42⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        43⤵
        
        PID:2484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        44⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        45⤵
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        46⤵
        
        PID:2780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        47⤵
        
        PID:3220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        48⤵
        
        PID:4852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        49⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        50⤵
        
        PID:1120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        51⤵
        
        PID:3956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        52⤵
        
        PID:2592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        53⤵
        
        PID:4400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        54⤵
        
        PID:3692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        55⤵
        
        PID:3428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        56⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        57⤵
        
        PID:776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        58⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        59⤵
        
        PID:2508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        60⤵
        
        PID:372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        61⤵
        
        PID:976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        62⤵
        
        PID:2568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        63⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        64⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        65⤵
        
        PID:3628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        66⤵
        
        PID:2292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        67⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        68⤵
        
        PID:2064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        69⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        70⤵
        
        PID:2540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        71⤵
        
        PID:4020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        72⤵
        
        PID:3964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        73⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        74⤵
        
        PID:4676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        75⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        76⤵
        
        PID:3688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        77⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        78⤵
        
        PID:4044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        79⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        80⤵
        
        PID:3492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        81⤵
        
        PID:3980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        82⤵
        
        PID:224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        83⤵
        
        PID:2600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        84⤵
        
        PID:1148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        85⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        86⤵
        
        PID:1420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        87⤵
        
        PID:540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        88⤵
        
        PID:2708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        89⤵
        
        PID:640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        90⤵
        
        PID:636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        91⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        92⤵
        
        PID:4928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        93⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        94⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        95⤵
        
        PID:2736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        96⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        97⤵
        
        PID:4276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        98⤵
        
        PID:928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        99⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        100⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        101⤵
        
        PID:824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        102⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        103⤵
        
        PID:5144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        104⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        105⤵
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        106⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        107⤵
        
        PID:5208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        108⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        109⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        110⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        111⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        112⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        113⤵
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        114⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        115⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        116⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        117⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        118⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        119⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        120⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        121⤵
        
        PID:5444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        122⤵
        
        PID:5460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        123⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        124⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        125⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        126⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        127⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        128⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        129⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        130⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        131⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        132⤵
        
        PID:5616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        133⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        134⤵
        
        PID:5644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        135⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        136⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        137⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        138⤵
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        139⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        140⤵
        
        PID:5740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        141⤵
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        142⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        143⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        144⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        145⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        146⤵
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        147⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        148⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        149⤵
        
        PID:5884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        150⤵
        
        PID:5900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        151⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        152⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        153⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        154⤵
        
        PID:5964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        155⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        156⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        157⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        158⤵
        
        PID:6028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        159⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        160⤵
        
        PID:6060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        161⤵
        
        PID:6072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        162⤵
        
        PID:6088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        163⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        164⤵
        
        PID:6120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        165⤵
        
        PID:6132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        166⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        167⤵
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        168⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        169⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        170⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        171⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        172⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        173⤵
        
        PID:6244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        174⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        175⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        176⤵
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        177⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        178⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        179⤵
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        180⤵
        
        PID:6356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        181⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        182⤵
        
        PID:6388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        183⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        184⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        185⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        186⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        187⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        188⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        189⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        190⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        191⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        192⤵
        
        PID:6544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        193⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        194⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        195⤵
        
        PID:6588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        196⤵
        
        PID:6604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        197⤵
        
        PID:6620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        198⤵
        
        PID:6632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        199⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        200⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        201⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        202⤵
        
        PID:6696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        203⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        204⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        205⤵
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        206⤵
        
        PID:6764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        207⤵
        
        PID:6780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        208⤵
        
        PID:6796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        209⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        210⤵
        
        PID:6824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        211⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        212⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        213⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        214⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        215⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        216⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        217⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        218⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        219⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        220⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        221⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        222⤵
        
        PID:7000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        223⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        224⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        225⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        226⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        227⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        228⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        229⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        230⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        231⤵
        
        PID:7128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        232⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        233⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        234⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        235⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        236⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        237⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        238⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        239⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        240⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        241⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        242⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        243⤵
        
        PID:7320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        244⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        245⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        246⤵
        
        PID:7372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        247⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        248⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        249⤵
        
        PID:7448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        250⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        251⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        252⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        253⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        254⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        255⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        256⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        257⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        258⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        259⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        260⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        261⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        262⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        263⤵
        
        PID:7676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        264⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        265⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        266⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        267⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        268⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        269⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        270⤵
        
        PID:7776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        271⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        272⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        273⤵
        
        PID:7820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        274⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        275⤵
        
        PID:7868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        276⤵
        
        PID:7888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        277⤵
        
        PID:7912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        278⤵
        
        PID:7936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        279⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        280⤵
        
        PID:8012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        281⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        282⤵
        
        PID:8056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        283⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        284⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        285⤵
        
        PID:8152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        286⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        287⤵
        
        PID:5008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        288⤵
        
        PID:3932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        289⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        290⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        291⤵
        
        PID:3048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        292⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        293⤵
        
        PID:8200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        294⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        295⤵
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        296⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        297⤵
        
        PID:8248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        298⤵
        
        PID:8260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        299⤵
        
        PID:8276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        300⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        301⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        302⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        303⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        304⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        305⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        306⤵
        
        PID:8372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        307⤵
        
        PID:8388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        308⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        309⤵
        
        PID:8420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        310⤵
        
        PID:8432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        311⤵
        
        PID:8448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        312⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        313⤵
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        314⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        315⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        316⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        317⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        318⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        319⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        320⤵
        
        PID:8576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        321⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        322⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        323⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        324⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        325⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        326⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        327⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        328⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        329⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        330⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        331⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        332⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        333⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        334⤵
        
        PID:8780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        335⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        336⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        337⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        338⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        339⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        340⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        341⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        342⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        343⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        344⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        345⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        346⤵
        
        PID:8964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        347⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        348⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        349⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        350⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        351⤵
        
        PID:9040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        352⤵
        
        PID:9056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        353⤵
        
        PID:9072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        354⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        355⤵
        
        PID:9104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        356⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        357⤵
        
        PID:9132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        358⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        359⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        360⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        361⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        362⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        363⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        364⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        365⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        366⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        367⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        368⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        369⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        370⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        371⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        372⤵
        
        PID:9372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        373⤵
        
        PID:9388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        374⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        375⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        376⤵
        
        PID:9432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        377⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        378⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        379⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        380⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        381⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        382⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        383⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        384⤵
        
        PID:9556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        385⤵
        
        PID:9572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        386⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        387⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        388⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        389⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        390⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        391⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        392⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        393⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        394⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        395⤵
        
        PID:9724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        396⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        397⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        398⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        399⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        400⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        401⤵
        
        PID:9812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        402⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        403⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        404⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        405⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        406⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        407⤵
        
        PID:9896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        408⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        409⤵
        
        PID:9928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        410⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        411⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        412⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        413⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        414⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        415⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        416⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        417⤵
        
        PID:10044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        418⤵
        
        PID:10060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        419⤵
        
        PID:10076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        420⤵
        
        PID:10092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        421⤵
        
        PID:10108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        422⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        423⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        424⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        425⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        426⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        427⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        428⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        429⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        430⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        431⤵
        
        PID:10252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        432⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        433⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        434⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        435⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        436⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        437⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        438⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        439⤵
        
        PID:10368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        440⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        441⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        442⤵
        
        PID:10416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        443⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        444⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        445⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        446⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        447⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        448⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        449⤵
        
        PID:10540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        450⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        451⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        452⤵
        
        PID:10616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        453⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        454⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        455⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        456⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        457⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        458⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        459⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        460⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        461⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        462⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        463⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        464⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        465⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        466⤵
        
        PID:10824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        467⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        468⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        469⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        470⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        471⤵
        
        PID:10900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        472⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        473⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        474⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        475⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        476⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        477⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        478⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        479⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        480⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        481⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        482⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        483⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        484⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        485⤵
        
        PID:11116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        486⤵
        
        PID:11128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        487⤵
        
        PID:11144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        488⤵
        
        PID:11156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        489⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        490⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        491⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        492⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        493⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        494⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        495⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        496⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        497⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        498⤵
        
        PID:11292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        499⤵
        
        PID:11308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        500⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        501⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        502⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        503⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        504⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        505⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        506⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        507⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        508⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        509⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        510⤵
        
        PID:11472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        511⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        512⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        513⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        514⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        515⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        516⤵
        
        PID:11556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        517⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        518⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        519⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        520⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        521⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        522⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        523⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        524⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        525⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        526⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        527⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        528⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        529⤵
        
        PID:11744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        530⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        531⤵
        
        PID:11772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        532⤵
        
        PID:11788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        533⤵
        
        PID:11804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        534⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        535⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        536⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        537⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        538⤵
        
        PID:11944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        539⤵
        
        PID:11960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        540⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        541⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        542⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        543⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        544⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        545⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        546⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        547⤵
        
        PID:12096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        548⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        549⤵
        
        PID:12124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        550⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        551⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        552⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        553⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        554⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        555⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        556⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        557⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        558⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        559⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        560⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        561⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        562⤵
        
        PID:12304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        563⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        564⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        565⤵
        
        PID:12352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        566⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        567⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        568⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        569⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        570⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        571⤵
        
        PID:12456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        572⤵
        
        PID:12472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        573⤵
        
        PID:12488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        574⤵
        
        PID:12504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        575⤵
        
        PID:12520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        576⤵
        
        PID:12536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        577⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        578⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        579⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        580⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        581⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        582⤵
        
        PID:12620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        583⤵
        
        PID:12636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        584⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        585⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        586⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        587⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        588⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        589⤵
        
        PID:12724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        590⤵
        
        PID:12740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        591⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        592⤵
        
        PID:12772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        593⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        594⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        595⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        596⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        597⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        598⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        599⤵
        
        PID:12876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        600⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        601⤵
        
        PID:12900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        602⤵
        
        PID:12912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        603⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        604⤵
        
        PID:12944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        605⤵
        
        PID:12960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        606⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        607⤵
        
        PID:12992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        608⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        609⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        610⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        611⤵
        
        PID:13052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        612⤵
        
        PID:13068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        613⤵
        
        PID:13084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        614⤵
        
        PID:13100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        615⤵
        
        PID:13116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        616⤵
        
        PID:13132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        617⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        618⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        619⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        620⤵
        
        PID:13196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        621⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        622⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        623⤵
        
        PID:13240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        624⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        625⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        626⤵
        
        PID:13288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        627⤵
        
        PID:13304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        628⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        629⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        630⤵
        
        PID:7856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        631⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        632⤵
        
        PID:3192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        633⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        634⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        635⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        636⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        637⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        638⤵
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        639⤵
        
        PID:13384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        640⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        641⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        642⤵
        
        PID:13428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        643⤵
        
        PID:13440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        644⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        645⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        646⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        647⤵
        
        PID:13488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        648⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        649⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        650⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        651⤵
        
        PID:13548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        652⤵
        
        PID:13564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        653⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        654⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        655⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        656⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        657⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        658⤵
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        659⤵
        
        PID:13664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        660⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        661⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        662⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        663⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        664⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        665⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        666⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        667⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        668⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        669⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        670⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        671⤵
        
        PID:13852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        672⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        673⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        674⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        675⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        676⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        677⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        678⤵
        
        PID:13952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        679⤵
        
        PID:13964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        680⤵
        
        PID:13980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        681⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        682⤵
        
        PID:14008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        683⤵
        
        PID:14024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        684⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        685⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        686⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        687⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        688⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        689⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        690⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        691⤵
        
        PID:14144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        692⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        693⤵
        
        PID:14176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        694⤵
        
        PID:14192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        695⤵
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        696⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        697⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        698⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        699⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        700⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        701⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        702⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        703⤵
        
        PID:14332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        704⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        705⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        706⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        707⤵
        
        PID:14388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        708⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        709⤵
        
        PID:14416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        710⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        711⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        712⤵
        
        PID:14460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        713⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        714⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        715⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        716⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        717⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        718⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        719⤵
        
        PID:14556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        720⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        721⤵
        
        PID:14592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        722⤵
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        723⤵
        
        PID:14624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        724⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        725⤵
        
        PID:14656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        726⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        727⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        728⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        729⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        730⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        731⤵
        
        PID:14732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        732⤵
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        733⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        734⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        735⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        736⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        737⤵
        
        PID:14828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        738⤵
        
        PID:14840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        739⤵
        
        PID:14856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        740⤵
        
        PID:14868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        741⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        742⤵
        
        PID:14900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        743⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        744⤵
        
        PID:14932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        745⤵
        
        PID:14948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        746⤵
        
        PID:14964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        747⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        748⤵
        
        PID:15000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        749⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        750⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        751⤵
        
        PID:15048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        752⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        753⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        754⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        755⤵
        
        PID:15104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        756⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        757⤵
        
        PID:15136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        758⤵
        
        PID:15152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        759⤵
        
        PID:15172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        760⤵
        
        PID:15188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        761⤵
        
        PID:15204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        762⤵
        
        PID:15220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        763⤵
        
        PID:15240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        764⤵
        
        PID:15256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        765⤵
        
        PID:15272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        766⤵
        
        PID:15288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        767⤵
        
        PID:15300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        768⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        769⤵
        
        PID:15328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        770⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        771⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        772⤵
        
        PID:11908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        773⤵
        
        PID:2344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        774⤵
        
        PID:1552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        775⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        776⤵
        
        PID:15376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        777⤵
        
        PID:15388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        778⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        779⤵
        
        PID:15420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        780⤵
        
        PID:15436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        781⤵
        
        PID:15452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        782⤵
        
        PID:15468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        783⤵
        
        PID:15484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        784⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        785⤵
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        786⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        787⤵
        
        PID:15540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        788⤵
        
        PID:15556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        789⤵
        
        PID:15572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        790⤵
        
        PID:15584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        791⤵
        
        PID:15600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        792⤵
        
        PID:15616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        793⤵
        
        PID:15632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        794⤵
        
        PID:15648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        795⤵
        
        PID:15660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        796⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        797⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        798⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        799⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        800⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        801⤵
        
        PID:15744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        802⤵
        
        PID:15756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        803⤵
        
        PID:15768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        804⤵
        
        PID:15788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        805⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        806⤵
        
        PID:15820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        807⤵
        
        PID:15836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        808⤵
        
        PID:15848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        809⤵
        
        PID:15860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        810⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        811⤵
        
        PID:15884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        812⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        813⤵
        
        PID:15912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        814⤵
        
        PID:15928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        815⤵
        
        PID:15944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        816⤵
        
        PID:15960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        817⤵
        
        PID:15972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        818⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        819⤵
        
        PID:16000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        820⤵
        
        PID:16016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        821⤵
        
        PID:16032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        822⤵
        
        PID:16048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        823⤵
        
        PID:16064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        824⤵
        
        PID:16076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        825⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        826⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        827⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        828⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        829⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        830⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        831⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        832⤵
        
        PID:16192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        833⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        834⤵
        
        PID:16224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        835⤵
        
        PID:16240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        836⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        837⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        838⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        839⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        840⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        841⤵
        
        PID:16332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        842⤵
        
        PID:16348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        843⤵
        
        PID:16364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        844⤵
        
        PID:16380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        845⤵
        
        PID:16388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        846⤵
        
        PID:16404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        847⤵
        
        PID:16420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        848⤵
        
        PID:16436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        849⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        850⤵
        
        PID:16484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        851⤵
        
        PID:16516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        852⤵
        
        PID:16532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        853⤵
        
        PID:16544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        854⤵
        
        PID:16584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        855⤵
        
        PID:16604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        856⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        857⤵
        
        PID:16632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        858⤵
        
        PID:16648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        859⤵
        
        PID:16660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        860⤵
        
        PID:16676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        861⤵
        
        PID:16688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        862⤵
        
        PID:16704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        863⤵
        
        PID:16720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        864⤵
        
        PID:16732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        865⤵
        
        PID:16748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        866⤵
        
        PID:16760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        867⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        868⤵
        
        PID:16784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        869⤵
        
        PID:16796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        870⤵
        
        PID:16808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        871⤵
        
        PID:16824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        872⤵
        
        PID:16836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        873⤵
        
        PID:16852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118.dll,#1
        874⤵
        
        PID:16872

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads