5a507aba07b487ea01cdf51b06ed437b7e9bbcb3e2ec6b25066ac3ca6868e6c5

Analysis

max time kernel
92s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
23/07/2024, 08:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll
Size

75KB
MD5

66da02ab805cadb9a462b7e3cf508d8c
SHA1

617c22330e851910fdb78b165fb1e0568f5bc01c
SHA256

5a507aba07b487ea01cdf51b06ed437b7e9bbcb3e2ec6b25066ac3ca6868e6c5
SHA512

d305db5e74d361e380cebb05d43341b97c4cc307a096b4566dca36f563021f5de4ab9de3bbe4196dd5bbf46c72dc63e2fb3bd81f5603bff28c6b3a89dc867d14
SSDEEP

1536:bDp4oAXluVmEOr8/vid3wnSnxVhXiuKfzBvhxZvFjLcX3:PpfAXkBOWOCSVdiH/xZ5LW3

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1476 wrote to memory of 3120	1476	rundll32.exe	84
PID 1476 wrote to memory of 3120	1476	rundll32.exe	84
PID 1476 wrote to memory of 3120	1476	rundll32.exe	84
PID 3120 wrote to memory of 4168	3120	rundll32.exe	85
PID 3120 wrote to memory of 4168	3120	rundll32.exe	85
PID 3120 wrote to memory of 4168	3120	rundll32.exe	85
PID 4168 wrote to memory of 928	4168	rundll32.exe	86
PID 4168 wrote to memory of 928	4168	rundll32.exe	86
PID 4168 wrote to memory of 928	4168	rundll32.exe	86
PID 928 wrote to memory of 2380	928	rundll32.exe	87
PID 928 wrote to memory of 2380	928	rundll32.exe	87
PID 928 wrote to memory of 2380	928	rundll32.exe	87
PID 2380 wrote to memory of 1060	2380	rundll32.exe	88
PID 2380 wrote to memory of 1060	2380	rundll32.exe	88
PID 2380 wrote to memory of 1060	2380	rundll32.exe	88
PID 1060 wrote to memory of 1460	1060	rundll32.exe	89
PID 1060 wrote to memory of 1460	1060	rundll32.exe	89
PID 1060 wrote to memory of 1460	1060	rundll32.exe	89
PID 1460 wrote to memory of 3572	1460	rundll32.exe	90
PID 1460 wrote to memory of 3572	1460	rundll32.exe	90
PID 1460 wrote to memory of 3572	1460	rundll32.exe	90
PID 3572 wrote to memory of 4736	3572	rundll32.exe	91
PID 3572 wrote to memory of 4736	3572	rundll32.exe	91
PID 3572 wrote to memory of 4736	3572	rundll32.exe	91
PID 4736 wrote to memory of 3608	4736	rundll32.exe	92
PID 4736 wrote to memory of 3608	4736	rundll32.exe	92
PID 4736 wrote to memory of 3608	4736	rundll32.exe	92
PID 3608 wrote to memory of 4520	3608	rundll32.exe	93
PID 3608 wrote to memory of 4520	3608	rundll32.exe	93
PID 3608 wrote to memory of 4520	3608	rundll32.exe	93
PID 4520 wrote to memory of 1372	4520	rundll32.exe	94
PID 4520 wrote to memory of 1372	4520	rundll32.exe	94
PID 4520 wrote to memory of 1372	4520	rundll32.exe	94
PID 1372 wrote to memory of 1736	1372	rundll32.exe	95
PID 1372 wrote to memory of 1736	1372	rundll32.exe	95
PID 1372 wrote to memory of 1736	1372	rundll32.exe	95
PID 1736 wrote to memory of 3296	1736	rundll32.exe	96
PID 1736 wrote to memory of 3296	1736	rundll32.exe	96
PID 1736 wrote to memory of 3296	1736	rundll32.exe	96
PID 3296 wrote to memory of 2088	3296	rundll32.exe	97
PID 3296 wrote to memory of 2088	3296	rundll32.exe	97
PID 3296 wrote to memory of 2088	3296	rundll32.exe	97
PID 2088 wrote to memory of 1044	2088	rundll32.exe	98
PID 2088 wrote to memory of 1044	2088	rundll32.exe	98
PID 2088 wrote to memory of 1044	2088	rundll32.exe	98
PID 1044 wrote to memory of 628	1044	rundll32.exe	99
PID 1044 wrote to memory of 628	1044	rundll32.exe	99
PID 1044 wrote to memory of 628	1044	rundll32.exe	99
PID 628 wrote to memory of 3032	628	rundll32.exe	100
PID 628 wrote to memory of 3032	628	rundll32.exe	100
PID 628 wrote to memory of 3032	628	rundll32.exe	100
PID 3032 wrote to memory of 4728	3032	rundll32.exe	102
PID 3032 wrote to memory of 4728	3032	rundll32.exe	102
PID 3032 wrote to memory of 4728	3032	rundll32.exe	102
PID 4728 wrote to memory of 4348	4728	rundll32.exe	103
PID 4728 wrote to memory of 4348	4728	rundll32.exe	103
PID 4728 wrote to memory of 4348	4728	rundll32.exe	103
PID 4348 wrote to memory of 444	4348	rundll32.exe	104
PID 4348 wrote to memory of 444	4348	rundll32.exe	104
PID 4348 wrote to memory of 444	4348	rundll32.exe	104
PID 444 wrote to memory of 5116	444	rundll32.exe	106
PID 444 wrote to memory of 5116	444	rundll32.exe	106
PID 444 wrote to memory of 5116	444	rundll32.exe	106
PID 5116 wrote to memory of 2960	5116	rundll32.exe	107

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1476
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3120
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4168
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:928
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2380
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:1060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:1460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:4736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:3608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:1372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:5116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        23⤵
        
        PID:2960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        24⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        25⤵
        
        PID:3532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        26⤵
        
        PID:3540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        27⤵
        
        PID:2804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        28⤵
        
        PID:64
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        29⤵
        
        PID:3768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        30⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        31⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        32⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        33⤵
        
        PID:1880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        34⤵
        
        PID:3960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        35⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        36⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        37⤵
        
        PID:3680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        38⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        39⤵
        
        PID:748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        40⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        41⤵
        
        PID:1704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        42⤵
        
        PID:772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        43⤵
        
        PID:2248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        44⤵
        
        PID:556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        45⤵
        
        PID:892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        46⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        47⤵
        
        PID:3536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        48⤵
        
        PID:3592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        49⤵
        
        PID:472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        50⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        51⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        52⤵
        
        PID:2792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        53⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        54⤵
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        55⤵
        
        PID:2212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        56⤵
        
        PID:3720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        57⤵
        
        PID:3996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        58⤵
        
        PID:540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        59⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        60⤵
        
        PID:3200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        61⤵
        
        PID:3468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        62⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        63⤵
        
        PID:4288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        64⤵
        
        PID:660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        65⤵
        
        PID:672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        66⤵
        
        PID:876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        67⤵
        
        PID:4696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        68⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        69⤵
        
        PID:2672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        70⤵
        
        PID:1424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        71⤵
        
        PID:732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        72⤵
        
        PID:4200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        73⤵
        
        PID:1660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        74⤵
        
        PID:3488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        75⤵
        
        PID:4796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        76⤵
        
        PID:2352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        77⤵
        
        PID:4644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        78⤵
        
        PID:2896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        79⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        80⤵
        
        PID:2472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        81⤵
        
        PID:2340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        82⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        83⤵
        
        PID:3232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        84⤵
        
        PID:4304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        85⤵
        
        PID:4300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        86⤵
        
        PID:344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        87⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        88⤵
        
        PID:3596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        89⤵
        
        PID:2208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        90⤵
        
        PID:4844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        91⤵
        
        PID:2100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        92⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        93⤵
        
        PID:5148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        94⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        95⤵
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        96⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        97⤵
        
        PID:5208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        98⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        99⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        100⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        101⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        102⤵
        
        PID:5288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        103⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        104⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        105⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        106⤵
        
        PID:5348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        107⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        108⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        109⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        110⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        111⤵
        
        PID:5428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        112⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        113⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        114⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        115⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        116⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        117⤵
        
        PID:5516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        118⤵
        
        PID:5532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        119⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        120⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        121⤵
        
        PID:5592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        122⤵
        
        PID:5616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        123⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        124⤵
        
        PID:5648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        125⤵
        
        PID:5664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        126⤵
        
        PID:5680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        127⤵
        
        PID:5696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        128⤵
        
        PID:5708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        129⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        130⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        131⤵
        
        PID:5764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        132⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        133⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        134⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        135⤵
        
        PID:5828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        136⤵
        
        PID:5844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        137⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        138⤵
        
        PID:5876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        139⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        140⤵
        
        PID:5908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        141⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        142⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        143⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        144⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        145⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        146⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        147⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        148⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        149⤵
        
        PID:6048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        150⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        151⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        152⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        153⤵
        
        PID:6108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        154⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        155⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        156⤵
        
        PID:6156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        157⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        158⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        159⤵
        
        PID:6212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        160⤵
        
        PID:6228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        161⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        162⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        163⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        164⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        165⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        166⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        167⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        168⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        169⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        170⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        171⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        172⤵
        
        PID:6416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        173⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        174⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        175⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        176⤵
        
        PID:6476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        177⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        178⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        179⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        180⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        181⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        182⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        183⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        184⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        185⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        186⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        187⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        188⤵
        
        PID:6676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        189⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        190⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        191⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        192⤵
        
        PID:6736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        193⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        194⤵
        
        PID:6768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        195⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        196⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        197⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        198⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        199⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        200⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        201⤵
        
        PID:6880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        202⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        203⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        204⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        205⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        206⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        207⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        208⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        209⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        210⤵
        
        PID:7020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        211⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        212⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        213⤵
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        214⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        215⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        216⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        217⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        218⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        219⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        220⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        221⤵
        
        PID:368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        222⤵
        
        PID:3080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        223⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        224⤵
        
        PID:860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        225⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        226⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        227⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        228⤵
        
        PID:932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        229⤵
        
        PID:3252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        230⤵
        
        PID:2816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        231⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        232⤵
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        233⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        234⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        235⤵
        
        PID:7208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        236⤵
        
        PID:7220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        237⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        238⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        239⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        240⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        241⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        242⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        243⤵
        
        PID:7348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        244⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        245⤵
        
        PID:7388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        246⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        247⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        248⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        249⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        250⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        251⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        252⤵
        
        PID:7500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        253⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        254⤵
        
        PID:7532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        255⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        256⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        257⤵
        
        PID:7580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        258⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        259⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        260⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        261⤵
        
        PID:7672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        262⤵
        
        PID:7700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        263⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        264⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        265⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        266⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        267⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        268⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        269⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        270⤵
        
        PID:7832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        271⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        272⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        273⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        274⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        275⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        276⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        277⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        278⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        279⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        280⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        281⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        282⤵
        
        PID:8024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        283⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        284⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        285⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        286⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        287⤵
        
        PID:8136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        288⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        289⤵
        
        PID:8188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        290⤵
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        291⤵
        
        PID:2344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        292⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        293⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        294⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        295⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        296⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        297⤵
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        298⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        299⤵
        
        PID:8320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        300⤵
        
        PID:8336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        301⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        302⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        303⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        304⤵
        
        PID:8400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        305⤵
        
        PID:8416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        306⤵
        
        PID:8432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        307⤵
        
        PID:8448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        308⤵
        
        PID:8464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        309⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        310⤵
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        311⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        312⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        313⤵
        
        PID:8528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        314⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        315⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        316⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        317⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        318⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        319⤵
        
        PID:8680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        320⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        321⤵
        
        PID:8732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        322⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        323⤵
        
        PID:8788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        324⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        325⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        326⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        327⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        328⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        329⤵
        
        PID:8952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        330⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        331⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        332⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        333⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        334⤵
        
        PID:9040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        335⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        336⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        337⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        338⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        339⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        340⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        341⤵
        
        PID:9132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        342⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        343⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        344⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        345⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        346⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        347⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        348⤵
        
        PID:4380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        349⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        350⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        351⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        352⤵
        
        PID:9272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        353⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        354⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        355⤵
        
        PID:9320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        356⤵
        
        PID:9332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        357⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        358⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        359⤵
        
        PID:9380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        360⤵
        
        PID:9396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        361⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        362⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        363⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        364⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        365⤵
        
        PID:9472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        366⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        367⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        368⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        369⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        370⤵
        
        PID:9548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        371⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        372⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        373⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        374⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        375⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        376⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        377⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        378⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        379⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        380⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        381⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        382⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        383⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        384⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        385⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        386⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        387⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        388⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        389⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        390⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        391⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        392⤵
        
        PID:9896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        393⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        394⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        395⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        396⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        397⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        398⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        399⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        400⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        401⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        402⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        403⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        404⤵
        
        PID:10084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        405⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        406⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        407⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        408⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        409⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        410⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        411⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        412⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        413⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        414⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        415⤵
        
        PID:10252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        416⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        417⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        418⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        419⤵
        
        PID:10312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        420⤵
        
        PID:10328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        421⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        422⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        423⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        424⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        425⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        426⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        427⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        428⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        429⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        430⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        431⤵
        
        PID:10536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        432⤵
        
        PID:10552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        433⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        434⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        435⤵
        
        PID:10596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        436⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        437⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        438⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        439⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        440⤵
        
        PID:10672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        441⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        442⤵
        
        PID:10704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        443⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        444⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        445⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        446⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        447⤵
        
        PID:10780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        448⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        449⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        450⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        451⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        452⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        453⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        454⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        455⤵
        
        PID:10900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        456⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        457⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        458⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        459⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        460⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        461⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        462⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        463⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        464⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        465⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        466⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        467⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        468⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        469⤵
        
        PID:11112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        470⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        471⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        472⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        473⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        474⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        475⤵
        
        PID:11204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        476⤵
        
        PID:11220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        477⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        478⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        479⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        480⤵
        
        PID:1364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        481⤵
        
        PID:1188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        482⤵
        
        PID:1152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        483⤵
        
        PID:4908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        484⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        485⤵
        
        PID:3020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        486⤵
        
        PID:3168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        487⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        488⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        489⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        490⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        491⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        492⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        493⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        494⤵
        
        PID:11360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        495⤵
        
        PID:11376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        496⤵
        
        PID:11392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        497⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        498⤵
        
        PID:11424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        499⤵
        
        PID:11440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        500⤵
        
        PID:11456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        501⤵
        
        PID:11472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        502⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        503⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        504⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        505⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        506⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        507⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        508⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        509⤵
        
        PID:11592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        510⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        511⤵
        
        PID:11624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        512⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        513⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        514⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        515⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        516⤵
        
        PID:11696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        517⤵
        
        PID:11712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        518⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        519⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        520⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        521⤵
        
        PID:11772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        522⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        523⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        524⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        525⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        526⤵
        
        PID:11908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        527⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        528⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        529⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        530⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        531⤵
        
        PID:11988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        532⤵
        
        PID:12004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        533⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        534⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        535⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        536⤵
        
        PID:12060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        537⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        538⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        539⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        540⤵
        
        PID:12124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        541⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        542⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        543⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        544⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        545⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        546⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        547⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        548⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        549⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        550⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        551⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        552⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        553⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        554⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        555⤵
        
        PID:12348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        556⤵
        
        PID:12364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        557⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        558⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        559⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        560⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        561⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        562⤵
        
        PID:12456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        563⤵
        
        PID:12472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        564⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        565⤵
        
        PID:12504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        566⤵
        
        PID:12520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        567⤵
        
        PID:12532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        568⤵
        
        PID:12548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        569⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        570⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        571⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        572⤵
        
        PID:12604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        573⤵
        
        PID:12620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        574⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        575⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        576⤵
        
        PID:12664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        577⤵
        
        PID:12680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        578⤵
        
        PID:12696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        579⤵
        
        PID:12712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        580⤵
        
        PID:12728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        581⤵
        
        PID:12744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        582⤵
        
        PID:12760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        583⤵
        
        PID:12772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        584⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        585⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        586⤵
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        587⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        588⤵
        
        PID:12844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        589⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        590⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        591⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        592⤵
        
        PID:12912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        593⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        594⤵
        
        PID:12944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        595⤵
        
        PID:12956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        596⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        597⤵
        
        PID:12992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        598⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        599⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        600⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        601⤵
        
        PID:13052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        602⤵
        
        PID:13068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        603⤵
        
        PID:13080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        604⤵
        
        PID:13096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        605⤵
        
        PID:13112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        606⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        607⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        608⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        609⤵
        
        PID:13176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        610⤵
        
        PID:13192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        611⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        612⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        613⤵
        
        PID:13240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        614⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        615⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        616⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        617⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        618⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        619⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        620⤵
        
        PID:13348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        621⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        622⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        623⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        624⤵
        
        PID:13408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        625⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        626⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        627⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        628⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        629⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        630⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        631⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        632⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        633⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        634⤵
        
        PID:13628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        635⤵
        
        PID:13644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        636⤵
        
        PID:13660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        637⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        638⤵
        
        PID:13692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        639⤵
        
        PID:13708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        640⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        641⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        642⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        643⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        644⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        645⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        646⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        647⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        648⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        649⤵
        
        PID:13888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        650⤵
        
        PID:13904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        651⤵
        
        PID:13920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        652⤵
        
        PID:13932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        653⤵
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        654⤵
        
        PID:13960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        655⤵
        
        PID:13976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        656⤵
        
        PID:13992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        657⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        658⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        659⤵
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        660⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        661⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        662⤵
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        663⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        664⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        665⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        666⤵
        
        PID:14160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        667⤵
        
        PID:14172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        668⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        669⤵
        
        PID:14204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        670⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        671⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        672⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        673⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        674⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        675⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        676⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        677⤵
        
        PID:14332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        678⤵
        
        PID:4268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        679⤵
        
        PID:14348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        680⤵
        
        PID:14368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        681⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        682⤵
        
        PID:14400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        683⤵
        
        PID:14416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        684⤵
        
        PID:14432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        685⤵
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        686⤵
        
        PID:14460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        687⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        688⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        689⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        690⤵
        
        PID:14520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        691⤵
        
        PID:14532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        692⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        693⤵
        
        PID:14564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        694⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        695⤵
        
        PID:14588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        696⤵
        
        PID:14604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        697⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        698⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        699⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        700⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        701⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        702⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        703⤵
        
        PID:14712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        704⤵
        
        PID:14732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        705⤵
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        706⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        707⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        708⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        709⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        710⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        711⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        712⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        713⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        714⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        715⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        716⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        717⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        718⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        719⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        720⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        721⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        722⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        723⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        724⤵
        
        PID:15048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        725⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        726⤵
        
        PID:15080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        727⤵
        
        PID:15096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        728⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        729⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        730⤵
        
        PID:15140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        731⤵
        
        PID:15156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        732⤵
        
        PID:15172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        733⤵
        
        PID:15184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        734⤵
        
        PID:15204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        735⤵
        
        PID:15220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        736⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        737⤵
        
        PID:15248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        738⤵
        
        PID:15264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        739⤵
        
        PID:15280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        740⤵
        
        PID:15296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        741⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        742⤵
        
        PID:15328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        743⤵
        
        PID:15344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        744⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        745⤵
        
        PID:8568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        746⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        747⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        748⤵
        
        PID:14740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        749⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        750⤵
        
        PID:15376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        751⤵
        
        PID:15392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        752⤵
        
        PID:15408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        753⤵
        
        PID:15420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        754⤵
        
        PID:15432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        755⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        756⤵
        
        PID:15468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        757⤵
        
        PID:15480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        758⤵
        
        PID:15496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        759⤵
        
        PID:15512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        760⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        761⤵
        
        PID:15544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        762⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        763⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        764⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        765⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        766⤵
        
        PID:15620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        767⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        768⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        769⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        770⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        771⤵
        
        PID:15704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        772⤵
        
        PID:15720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        773⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        774⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        775⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        776⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        777⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        778⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        779⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        780⤵
        
        PID:15844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        781⤵
        
        PID:15860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        782⤵
        
        PID:15876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        783⤵
        
        PID:15892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        784⤵
        
        PID:15908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        785⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        786⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        787⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        788⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        789⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        790⤵
        
        PID:15996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        791⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        792⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        793⤵
        
        PID:16036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        794⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        795⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        796⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        797⤵
        
        PID:16096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        798⤵
        
        PID:16108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        799⤵
        
        PID:16124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        800⤵
        
        PID:16140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        801⤵
        
        PID:16160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        802⤵
        
        PID:16176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        803⤵
        
        PID:16192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        804⤵
        
        PID:16204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        805⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        806⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        807⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        808⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        809⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        810⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        811⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        812⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        813⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        814⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        815⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        816⤵
        
        PID:616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        817⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        818⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        819⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        820⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        821⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        822⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        823⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        824⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        825⤵
        
        PID:16488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        826⤵
        
        PID:16504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        827⤵
        
        PID:16520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        828⤵
        
        PID:16536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        829⤵
        
        PID:16548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        830⤵
        
        PID:16564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        831⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        832⤵
        
        PID:16596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        833⤵
        
        PID:16612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        834⤵
        
        PID:16628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        835⤵
        
        PID:16644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        836⤵
        
        PID:16660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        837⤵
        
        PID:16676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        838⤵
        
        PID:16692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        839⤵
        
        PID:16704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        840⤵
        
        PID:16724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        841⤵
        
        PID:16740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        842⤵
        
        PID:16760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        843⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        844⤵
        
        PID:16788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        845⤵
        
        PID:16800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        846⤵
        
        PID:16816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        847⤵
        
        PID:16832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        848⤵
        
        PID:16848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        849⤵
        
        PID:16864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        850⤵
        
        PID:16880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        851⤵
        
        PID:16892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        852⤵
        
        PID:16908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        853⤵
        
        PID:16920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        854⤵
        
        PID:16932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        855⤵
        
        PID:16948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        856⤵
        
        PID:16964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        857⤵
        
        PID:16980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        858⤵
        
        PID:16996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        859⤵
        
        PID:17008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        860⤵
        
        PID:17024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        861⤵
        
        PID:17040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        862⤵
        
        PID:17056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        863⤵
        
        PID:17068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        864⤵
        
        PID:17084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        865⤵
        
        PID:17100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        866⤵
        
        PID:17116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        867⤵
        
        PID:17128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        868⤵
        
        PID:17144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        869⤵
        
        PID:17160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        870⤵
        
        PID:17176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        871⤵
        
        PID:17192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        872⤵
        
        PID:17208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        873⤵
        
        PID:17224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        874⤵
        
        PID:17240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        875⤵
        
        PID:17256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        876⤵
        
        PID:17272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\66da02ab805cadb9a462b7e3cf508d8c_JaffaCakes118.dll,#1
        877⤵
        
        PID:17288

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads