3d75decec4ce2ed3e01f494dd3fd81659f2343e03a6a9669c763f02735b4be82

Analysis

max time kernel
141s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
23-07-2024 08:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll
Size

85KB
MD5

66c7d50f34c1064f8e4c146dcf793e9c
SHA1

19bf9943d21cd064bc180f5286b570caf78c8e6f
SHA256

3d75decec4ce2ed3e01f494dd3fd81659f2343e03a6a9669c763f02735b4be82
SHA512

0726029ebce6ec3e32b409237481b7c2d86ed46a3210a2e105ffb408e8f02dac439621fb4662626fd4c2da19fa32301acc39e90bd3e13c8e142116fe52e7fe8c
SSDEEP

1536:OQQ2STcPPvV1jCB8h8UZbOuVC1+tzEkYVGnDFPC:OQQ2SIXPjCOyYbOuVC1+tbYwDFPC

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 2828	2124	rundll32.exe	84
PID 2124 wrote to memory of 2828	2124	rundll32.exe	84
PID 2124 wrote to memory of 2828	2124	rundll32.exe	84
PID 2828 wrote to memory of 3708	2828	rundll32.exe	85
PID 2828 wrote to memory of 3708	2828	rundll32.exe	85
PID 2828 wrote to memory of 3708	2828	rundll32.exe	85
PID 3708 wrote to memory of 4816	3708	rundll32.exe	86
PID 3708 wrote to memory of 4816	3708	rundll32.exe	86
PID 3708 wrote to memory of 4816	3708	rundll32.exe	86
PID 4816 wrote to memory of 3996	4816	rundll32.exe	87
PID 4816 wrote to memory of 3996	4816	rundll32.exe	87
PID 4816 wrote to memory of 3996	4816	rundll32.exe	87
PID 3996 wrote to memory of 2296	3996	rundll32.exe	88
PID 3996 wrote to memory of 2296	3996	rundll32.exe	88
PID 3996 wrote to memory of 2296	3996	rundll32.exe	88
PID 2296 wrote to memory of 2868	2296	rundll32.exe	89
PID 2296 wrote to memory of 2868	2296	rundll32.exe	89
PID 2296 wrote to memory of 2868	2296	rundll32.exe	89
PID 2868 wrote to memory of 940	2868	rundll32.exe	90
PID 2868 wrote to memory of 940	2868	rundll32.exe	90
PID 2868 wrote to memory of 940	2868	rundll32.exe	90
PID 940 wrote to memory of 364	940	rundll32.exe	91
PID 940 wrote to memory of 364	940	rundll32.exe	91
PID 940 wrote to memory of 364	940	rundll32.exe	91
PID 364 wrote to memory of 2768	364	rundll32.exe	92
PID 364 wrote to memory of 2768	364	rundll32.exe	92
PID 364 wrote to memory of 2768	364	rundll32.exe	92
PID 2768 wrote to memory of 3292	2768	rundll32.exe	93
PID 2768 wrote to memory of 3292	2768	rundll32.exe	93
PID 2768 wrote to memory of 3292	2768	rundll32.exe	93
PID 3292 wrote to memory of 448	3292	rundll32.exe	94
PID 3292 wrote to memory of 448	3292	rundll32.exe	94
PID 3292 wrote to memory of 448	3292	rundll32.exe	94
PID 448 wrote to memory of 3688	448	rundll32.exe	95
PID 448 wrote to memory of 3688	448	rundll32.exe	95
PID 448 wrote to memory of 3688	448	rundll32.exe	95
PID 3688 wrote to memory of 2320	3688	rundll32.exe	96
PID 3688 wrote to memory of 2320	3688	rundll32.exe	96
PID 3688 wrote to memory of 2320	3688	rundll32.exe	96
PID 2320 wrote to memory of 1220	2320	rundll32.exe	97
PID 2320 wrote to memory of 1220	2320	rundll32.exe	97
PID 2320 wrote to memory of 1220	2320	rundll32.exe	97
PID 1220 wrote to memory of 4560	1220	rundll32.exe	98
PID 1220 wrote to memory of 4560	1220	rundll32.exe	98
PID 1220 wrote to memory of 4560	1220	rundll32.exe	98
PID 4560 wrote to memory of 4996	4560	rundll32.exe	99
PID 4560 wrote to memory of 4996	4560	rundll32.exe	99
PID 4560 wrote to memory of 4996	4560	rundll32.exe	99
PID 4996 wrote to memory of 3156	4996	rundll32.exe	100
PID 4996 wrote to memory of 3156	4996	rundll32.exe	100
PID 4996 wrote to memory of 3156	4996	rundll32.exe	100
PID 3156 wrote to memory of 3440	3156	rundll32.exe	101
PID 3156 wrote to memory of 3440	3156	rundll32.exe	101
PID 3156 wrote to memory of 3440	3156	rundll32.exe	101
PID 3440 wrote to memory of 1140	3440	rundll32.exe	102
PID 3440 wrote to memory of 1140	3440	rundll32.exe	102
PID 3440 wrote to memory of 1140	3440	rundll32.exe	102
PID 1140 wrote to memory of 2740	1140	rundll32.exe	103
PID 1140 wrote to memory of 2740	1140	rundll32.exe	103
PID 1140 wrote to memory of 2740	1140	rundll32.exe	103
PID 2740 wrote to memory of 5008	2740	rundll32.exe	105
PID 2740 wrote to memory of 5008	2740	rundll32.exe	105
PID 2740 wrote to memory of 5008	2740	rundll32.exe	105
PID 5008 wrote to memory of 536	5008	rundll32.exe	106

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2828
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3708
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4816
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3996
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:2868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:2768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:1220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:4560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:3440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:1140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:5008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        23⤵
        
        PID:536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        24⤵
        
        PID:312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        25⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        26⤵
        
        PID:1984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        27⤵
        
        PID:5068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        28⤵
        
        PID:1780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        29⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        30⤵
        
        PID:1332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        31⤵
        
        PID:4536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        32⤵
        
        PID:2376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        33⤵
        
        PID:2964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        34⤵
        
        PID:2184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        35⤵
        
        PID:1492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        36⤵
        
        PID:2260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        37⤵
        
        PID:3976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        38⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        39⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        40⤵
        
        PID:3552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        41⤵
        
        PID:1056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        42⤵
        
        PID:4732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        43⤵
        
        PID:4704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        44⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        45⤵
        
        PID:4100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        46⤵
        
        PID:408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        47⤵
        
        PID:2476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        48⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        49⤵
        
        PID:4796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        50⤵
        
        PID:3492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        51⤵
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        52⤵
        
        PID:4528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        53⤵
        
        PID:2664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        54⤵
        
        PID:4292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        55⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        56⤵
        
        PID:1292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        57⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        58⤵
        
        PID:2872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        59⤵
        
        PID:2408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        60⤵
        
        PID:2036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        61⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        62⤵
        
        PID:4640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        63⤵
        
        PID:1800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        64⤵
        
        PID:2976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        65⤵
        
        PID:988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        66⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        67⤵
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        68⤵
        
        PID:1244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        69⤵
        
        PID:3356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        70⤵
        
        PID:1428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        71⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        72⤵
        
        PID:4228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        73⤵
        
        PID:1212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        74⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        75⤵
        
        PID:3260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        76⤵
        
        PID:5048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        77⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        78⤵
        
        PID:2168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        79⤵
        
        PID:3188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        80⤵
        
        PID:968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        81⤵
        
        PID:1364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        82⤵
        
        PID:884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        83⤵
        
        PID:3392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        84⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        85⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        86⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        87⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        88⤵
        
        PID:3584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        89⤵
        
        PID:4148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        90⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        91⤵
        
        PID:4724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        92⤵
        
        PID:3444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        93⤵
        
        PID:3164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        94⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        95⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        96⤵
        
        PID:2572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        97⤵
        
        PID:4484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        98⤵
        
        PID:2360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        99⤵
        
        PID:1964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        100⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        101⤵
        
        PID:4452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        102⤵
        
        PID:5136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        103⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        104⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        105⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        106⤵
        
        PID:5204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        107⤵
        
        PID:5216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        108⤵
        
        PID:5232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        109⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        110⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        111⤵
        
        PID:5284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        112⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        113⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        114⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        115⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        116⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        117⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        118⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        119⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        120⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        121⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        122⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        123⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        124⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        125⤵
        
        PID:5516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        126⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        127⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        128⤵
        
        PID:5556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        129⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        130⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        131⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        132⤵
        
        PID:5616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        133⤵
        
        PID:5628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        134⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        135⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        136⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        137⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        138⤵
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        139⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        140⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        141⤵
        
        PID:5752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        142⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        143⤵
        
        PID:5784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        144⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        145⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        146⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        147⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        148⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        149⤵
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        150⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        151⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        152⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        153⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        154⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        155⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        156⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        157⤵
        
        PID:6028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        158⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        159⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        160⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        161⤵
        
        PID:6108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        162⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        163⤵
        
        PID:6136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        164⤵
        
        PID:1228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        165⤵
        
        PID:6008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        166⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        167⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        168⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        169⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        170⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        171⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        172⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        173⤵
        
        PID:6268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        174⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        175⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        176⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        177⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        178⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        179⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        180⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        181⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        182⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        183⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        184⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        185⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        186⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        187⤵
        
        PID:6492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        188⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        189⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        190⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        191⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        192⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        193⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        194⤵
        
        PID:6604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        195⤵
        
        PID:6636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        196⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        197⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        198⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        199⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        200⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        201⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        202⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        203⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        204⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        205⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        206⤵
        
        PID:6952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        207⤵
        
        PID:6968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        208⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        209⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        210⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        211⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        212⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        213⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        214⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        215⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        216⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        217⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        218⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        219⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        220⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        221⤵
        
        PID:3484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        222⤵
        
        PID:3104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        223⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        224⤵
        
        PID:620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        225⤵
        
        PID:2980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        226⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        227⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        228⤵
        
        PID:7208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        229⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        230⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        231⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        232⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        233⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        234⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        235⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        236⤵
        
        PID:7324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        237⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        238⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        239⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        240⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        241⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        242⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        243⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        244⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        245⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        246⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        247⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        248⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        249⤵
        
        PID:7524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        250⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        251⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        252⤵
        
        PID:7564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        253⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        254⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        255⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        256⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        257⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        258⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        259⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        260⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        261⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        262⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        263⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        264⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        265⤵
        
        PID:7776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        266⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        267⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        268⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        269⤵
        
        PID:7836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        270⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        271⤵
        
        PID:7864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        272⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        273⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        274⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        275⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        276⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        277⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        278⤵
        
        PID:7968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        279⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        280⤵
        
        PID:8000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        281⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        282⤵
        
        PID:8028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        283⤵
        
        PID:8044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        284⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        285⤵
        
        PID:8072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        286⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        287⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        288⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        289⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        290⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        291⤵
        
        PID:8156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        292⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        293⤵
        
        PID:7128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        294⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        295⤵
        
        PID:8216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        296⤵
        
        PID:8228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        297⤵
        
        PID:8244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        298⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        299⤵
        
        PID:8276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        300⤵
        
        PID:8292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        301⤵
        
        PID:8308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        302⤵
        
        PID:8320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        303⤵
        
        PID:8336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        304⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        305⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        306⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        307⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        308⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        309⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        310⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        311⤵
        
        PID:8468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        312⤵
        
        PID:8512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        313⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        314⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        315⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        316⤵
        
        PID:8576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        317⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        318⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        319⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        320⤵
        
        PID:8628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        321⤵
        
        PID:8644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        322⤵
        
        PID:8660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        323⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        324⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        325⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        326⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        327⤵
        
        PID:8732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        328⤵
        
        PID:8748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        329⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        330⤵
        
        PID:8780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        331⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        332⤵
        
        PID:8804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        333⤵
        
        PID:8820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        334⤵
        
        PID:8832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        335⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        336⤵
        
        PID:8864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        337⤵
        
        PID:8880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        338⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        339⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        340⤵
        
        PID:8924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        341⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        342⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        343⤵
        
        PID:8976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        344⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        345⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        346⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        347⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        348⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        349⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        350⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        351⤵
        
        PID:9092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        352⤵
        
        PID:9104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        353⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        354⤵
        
        PID:9136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        355⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        356⤵
        
        PID:9168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        357⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        358⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        359⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        360⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        361⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        362⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        363⤵
        
        PID:9272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        364⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        365⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        366⤵
        
        PID:9320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        367⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        368⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        369⤵
        
        PID:9368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        370⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        371⤵
        
        PID:9396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        372⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        373⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        374⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        375⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        376⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        377⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        378⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        379⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        380⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        381⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        382⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        383⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        384⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        385⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        386⤵
        
        PID:9616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        387⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        388⤵
        
        PID:9640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        389⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        390⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        391⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        392⤵
        
        PID:9708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        393⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        394⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        395⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        396⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        397⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        398⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        399⤵
        
        PID:9812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        400⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        401⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        402⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        403⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        404⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        405⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        406⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        407⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        408⤵
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        409⤵
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        410⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        411⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        412⤵
        
        PID:10000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        413⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        414⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        415⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        416⤵
        
        PID:10060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        417⤵
        
        PID:10076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        418⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        419⤵
        
        PID:10104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        420⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        421⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        422⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        423⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        424⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        425⤵
        
        PID:10192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        426⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        427⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        428⤵
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        429⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        430⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        431⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        432⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        433⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        434⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        435⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        436⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        437⤵
        
        PID:10432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        438⤵
        
        PID:10448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        439⤵
        
        PID:10464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        440⤵
        
        PID:10480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        441⤵
        
        PID:10492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        442⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        443⤵
        
        PID:10528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        444⤵
        
        PID:10540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        445⤵
        
        PID:10560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        446⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        447⤵
        
        PID:10588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        448⤵
        
        PID:10604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        449⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        450⤵
        
        PID:10636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        451⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        452⤵
        
        PID:10664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        453⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        454⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        455⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        456⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        457⤵
        
        PID:10740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        458⤵
        
        PID:10756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        459⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        460⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        461⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        462⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        463⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        464⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        465⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        466⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        467⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        468⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        469⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        470⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        471⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        472⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        473⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        474⤵
        
        PID:11004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        475⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        476⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        477⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        478⤵
        
        PID:11056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        479⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        480⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        481⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        482⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        483⤵
        
        PID:11136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        484⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        485⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        486⤵
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        487⤵
        
        PID:11200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        488⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        489⤵
        
        PID:11228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        490⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        491⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        492⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        493⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        494⤵
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        495⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        496⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        497⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        498⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        499⤵
        
        PID:11376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        500⤵
        
        PID:11392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        501⤵
        
        PID:11404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        502⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        503⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        504⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        505⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        506⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        507⤵
        
        PID:11496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        508⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        509⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        510⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        511⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        512⤵
        
        PID:11572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        513⤵
        
        PID:11592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        514⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        515⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        516⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        517⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        518⤵
        
        PID:11668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        519⤵
        
        PID:11684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        520⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        521⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        522⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        523⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        524⤵
        
        PID:11760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        525⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        526⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        527⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        528⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        529⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        530⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        531⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        532⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        533⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        534⤵
        
        PID:11916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        535⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        536⤵
        
        PID:11944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        537⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        538⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        539⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        540⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        541⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        542⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        543⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        544⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        545⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        546⤵
        
        PID:12088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        547⤵
        
        PID:12104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        548⤵
        
        PID:12116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        549⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        550⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        551⤵
        
        PID:12160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        552⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        553⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        554⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        555⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        556⤵
        
        PID:12292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        557⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        558⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        559⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        560⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        561⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        562⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        563⤵
        
        PID:12424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        564⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        565⤵
        
        PID:12448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        566⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        567⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        568⤵
        
        PID:12496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        569⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        570⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        571⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        572⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        573⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        574⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        575⤵
        
        PID:12604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        576⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        577⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        578⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        579⤵
        
        PID:12664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        580⤵
        
        PID:12680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        581⤵
        
        PID:12696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        582⤵
        
        PID:12712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        583⤵
        
        PID:12728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        584⤵
        
        PID:12740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        585⤵
        
        PID:12756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        586⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        587⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        588⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        589⤵
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        590⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        591⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        592⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        593⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        594⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        595⤵
        
        PID:12916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        596⤵
        
        PID:12932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        597⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        598⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        599⤵
        
        PID:12980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        600⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        601⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        602⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        603⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        604⤵
        
        PID:13064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        605⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        606⤵
        
        PID:13096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        607⤵
        
        PID:13112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        608⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        609⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        610⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        611⤵
        
        PID:13176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        612⤵
        
        PID:13192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        613⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        614⤵
        
        PID:13220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        615⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        616⤵
        
        PID:13252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        617⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        618⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        619⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        620⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        621⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        622⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        623⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        624⤵
        
        PID:3564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        625⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        626⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        627⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        628⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        629⤵
        
        PID:13384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        630⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        631⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        632⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        633⤵
        
        PID:13440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        634⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        635⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        636⤵
        
        PID:13488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        637⤵
        
        PID:13504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        638⤵
        
        PID:13524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        639⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        640⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        641⤵
        
        PID:13572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        642⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        643⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        644⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        645⤵
        
        PID:13632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        646⤵
        
        PID:13652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        647⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        648⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        649⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        650⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        651⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        652⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        653⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        654⤵
        
        PID:13784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        655⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        656⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        657⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        658⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        659⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        660⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        661⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        662⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        663⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        664⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        665⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        666⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        667⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        668⤵
        
        PID:14000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        669⤵
        
        PID:14016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        670⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        671⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        672⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        673⤵
        
        PID:14080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        674⤵
        
        PID:14096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        675⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        676⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        677⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        678⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        679⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        680⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        681⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        682⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        683⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        684⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        685⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        686⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        687⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        688⤵
        
        PID:14316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        689⤵
        
        PID:14332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        690⤵
        
        PID:6812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        691⤵
        
        PID:13692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        692⤵
        
        PID:14352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        693⤵
        
        PID:14368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        694⤵
        
        PID:14384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        695⤵
        
        PID:14400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        696⤵
        
        PID:14416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        697⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        698⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        699⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        700⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        701⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        702⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        703⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        704⤵
        
        PID:14532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        705⤵
        
        PID:14548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        706⤵
        
        PID:14564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        707⤵
        
        PID:14580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        708⤵
        
        PID:14596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        709⤵
        
        PID:14612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        710⤵
        
        PID:14624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        711⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        712⤵
        
        PID:14656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        713⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        714⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        715⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        716⤵
        
        PID:14716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        717⤵
        
        PID:14732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        718⤵
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        719⤵
        
        PID:14764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        720⤵
        
        PID:14780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        721⤵
        
        PID:14796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        722⤵
        
        PID:14808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        723⤵
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        724⤵
        
        PID:14836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        725⤵
        
        PID:14852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        726⤵
        
        PID:14868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        727⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        728⤵
        
        PID:14900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        729⤵
        
        PID:14916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        730⤵
        
        PID:14928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        731⤵
        
        PID:14940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        732⤵
        
        PID:14952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        733⤵
        
        PID:14968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        734⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        735⤵
        
        PID:14996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        736⤵
        
        PID:15008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        737⤵
        
        PID:15024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        738⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        739⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        740⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        741⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        742⤵
        
        PID:15112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        743⤵
        
        PID:15128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        744⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        745⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        746⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        747⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        748⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        749⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        750⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        751⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        752⤵
        
        PID:15272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        753⤵
        
        PID:15288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        754⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        755⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        756⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        757⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        758⤵
        
        PID:4432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        759⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        760⤵
        
        PID:15384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        761⤵
        
        PID:15400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        762⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        763⤵
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        764⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        765⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        766⤵
        
        PID:15476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        767⤵
        
        PID:15492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        768⤵
        
        PID:15504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        769⤵
        
        PID:15524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        770⤵
        
        PID:15540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        771⤵
        
        PID:15552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        772⤵
        
        PID:15568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        773⤵
        
        PID:15580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        774⤵
        
        PID:15596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        775⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        776⤵
        
        PID:15620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        777⤵
        
        PID:15636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        778⤵
        
        PID:15648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        779⤵
        
        PID:15660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        780⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        781⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        782⤵
        
        PID:15704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        783⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        784⤵
        
        PID:15740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        785⤵
        
        PID:15752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        786⤵
        
        PID:15768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        787⤵
        
        PID:15784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        788⤵
        
        PID:15804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        789⤵
        
        PID:15820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        790⤵
        
        PID:15836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        791⤵
        
        PID:15852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        792⤵
        
        PID:15868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        793⤵
        
        PID:15880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        794⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        795⤵
        
        PID:15912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        796⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        797⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        798⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        799⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        800⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        801⤵
        
        PID:16000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        802⤵
        
        PID:16016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        803⤵
        
        PID:16032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        804⤵
        
        PID:16048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        805⤵
        
        PID:16064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        806⤵
        
        PID:16076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        807⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        808⤵
        
        PID:16112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        809⤵
        
        PID:16128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        810⤵
        
        PID:16144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        811⤵
        
        PID:16160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        812⤵
        
        PID:16176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        813⤵
        
        PID:16192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        814⤵
        
        PID:16204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        815⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        816⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        817⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        818⤵
        
        PID:16264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        819⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        820⤵
        
        PID:16288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        821⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        822⤵
        
        PID:16320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        823⤵
        
        PID:16336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        824⤵
        
        PID:16352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        825⤵
        
        PID:16364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        826⤵
        
        PID:16380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        827⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        828⤵
        
        PID:4144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        829⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        830⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        831⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        832⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        833⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        834⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        835⤵
        
        PID:16492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        836⤵
        
        PID:16508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        837⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        838⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        839⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        840⤵
        
        PID:16572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        841⤵
        
        PID:16588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        842⤵
        
        PID:16600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        843⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        844⤵
        
        PID:16632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        845⤵
        
        PID:16652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        846⤵
        
        PID:16668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        847⤵
        
        PID:16684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        848⤵
        
        PID:16696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        849⤵
        
        PID:16712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        850⤵
        
        PID:16728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        851⤵
        
        PID:16744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        852⤵
        
        PID:16756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        853⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        854⤵
        
        PID:16788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        855⤵
        
        PID:16800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        856⤵
        
        PID:16812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        857⤵
        
        PID:16828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        858⤵
        
        PID:16840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        859⤵
        
        PID:16856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        860⤵
        
        PID:16872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        861⤵
        
        PID:16888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        862⤵
        
        PID:16900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        863⤵
        
        PID:16916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        864⤵
        
        PID:16932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        865⤵
        
        PID:16948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        866⤵
        
        PID:16960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        867⤵
        
        PID:16980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        868⤵
        
        PID:16996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        869⤵
        
        PID:17008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        870⤵
        
        PID:17024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        871⤵
        
        PID:17040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        872⤵
        
        PID:17056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        873⤵
        
        PID:17072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        874⤵
        
        PID:17088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66c7d50f34c1064f8e4c146dcf793e9c_JaffaCakes118.dll,#1
        875⤵
        
        PID:17104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/17024-4-0x0000000075630000-0x00000000758B4000-memory.dmp

Filesize
2.5MB

Download
memory/17040-3-0x0000000075630000-0x00000000758B4000-memory.dmp

Filesize
2.5MB

Download
memory/17056-2-0x0000000075630000-0x00000000758B4000-memory.dmp

Filesize
2.5MB

Download
memory/17072-1-0x0000000075630000-0x00000000758B4000-memory.dmp

Filesize
2.5MB

Download
memory/17088-0-0x0000000075630000-0x00000000758B4000-memory.dmp

Filesize
2.5MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads