245064a69b7ca16ebfa7542467afc1d8ea17198640b51b5c57e8e28b09f625a6

Analysis

max time kernel
96s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 09:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll
Size

138KB
MD5

e2bf705280dadfe779f806709e0d6b2d
SHA1

d137115d1aa944e7b704bc0827dc99944c6122ef
SHA256

245064a69b7ca16ebfa7542467afc1d8ea17198640b51b5c57e8e28b09f625a6
SHA512

f037b5e38102b5641ceb437687de3426a25e470a841907251e3493fbd63756538b7f8e923be5e8a22596367753c37d09b56d78eac7a9a9c50f355f61f547d812
SSDEEP

3072:ijGpZjFTcQODoxoxon1f8wL6rB8JBp2yF2+gcVgUz:oa6o1fPp2yvgEj

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4932 wrote to memory of 3172	4932	rundll32.exe	82
PID 4932 wrote to memory of 3172	4932	rundll32.exe	82
PID 4932 wrote to memory of 3172	4932	rundll32.exe	82
PID 3172 wrote to memory of 3924	3172	rundll32.exe	83
PID 3172 wrote to memory of 3924	3172	rundll32.exe	83
PID 3172 wrote to memory of 3924	3172	rundll32.exe	83
PID 3924 wrote to memory of 3508	3924	rundll32.exe	84
PID 3924 wrote to memory of 3508	3924	rundll32.exe	84
PID 3924 wrote to memory of 3508	3924	rundll32.exe	84
PID 3508 wrote to memory of 1792	3508	rundll32.exe	85
PID 3508 wrote to memory of 1792	3508	rundll32.exe	85
PID 3508 wrote to memory of 1792	3508	rundll32.exe	85
PID 1792 wrote to memory of 3620	1792	rundll32.exe	86
PID 1792 wrote to memory of 3620	1792	rundll32.exe	86
PID 1792 wrote to memory of 3620	1792	rundll32.exe	86
PID 3620 wrote to memory of 2588	3620	rundll32.exe	87
PID 3620 wrote to memory of 2588	3620	rundll32.exe	87
PID 3620 wrote to memory of 2588	3620	rundll32.exe	87
PID 2588 wrote to memory of 1840	2588	rundll32.exe	88
PID 2588 wrote to memory of 1840	2588	rundll32.exe	88
PID 2588 wrote to memory of 1840	2588	rundll32.exe	88
PID 1840 wrote to memory of 3204	1840	rundll32.exe	89
PID 1840 wrote to memory of 3204	1840	rundll32.exe	89
PID 1840 wrote to memory of 3204	1840	rundll32.exe	89
PID 3204 wrote to memory of 5008	3204	rundll32.exe	90
PID 3204 wrote to memory of 5008	3204	rundll32.exe	90
PID 3204 wrote to memory of 5008	3204	rundll32.exe	90
PID 5008 wrote to memory of 4584	5008	rundll32.exe	91
PID 5008 wrote to memory of 4584	5008	rundll32.exe	91
PID 5008 wrote to memory of 4584	5008	rundll32.exe	91
PID 4584 wrote to memory of 1020	4584	rundll32.exe	92
PID 4584 wrote to memory of 1020	4584	rundll32.exe	92
PID 4584 wrote to memory of 1020	4584	rundll32.exe	92
PID 1020 wrote to memory of 4972	1020	rundll32.exe	93
PID 1020 wrote to memory of 4972	1020	rundll32.exe	93
PID 1020 wrote to memory of 4972	1020	rundll32.exe	93
PID 4972 wrote to memory of 4128	4972	rundll32.exe	94
PID 4972 wrote to memory of 4128	4972	rundll32.exe	94
PID 4972 wrote to memory of 4128	4972	rundll32.exe	94
PID 4128 wrote to memory of 4668	4128	rundll32.exe	95
PID 4128 wrote to memory of 4668	4128	rundll32.exe	95
PID 4128 wrote to memory of 4668	4128	rundll32.exe	95
PID 4668 wrote to memory of 1256	4668	rundll32.exe	96
PID 4668 wrote to memory of 1256	4668	rundll32.exe	96
PID 4668 wrote to memory of 1256	4668	rundll32.exe	96
PID 1256 wrote to memory of 4852	1256	rundll32.exe	97
PID 1256 wrote to memory of 4852	1256	rundll32.exe	97
PID 1256 wrote to memory of 4852	1256	rundll32.exe	97
PID 4852 wrote to memory of 4968	4852	rundll32.exe	98
PID 4852 wrote to memory of 4968	4852	rundll32.exe	98
PID 4852 wrote to memory of 4968	4852	rundll32.exe	98
PID 4968 wrote to memory of 4556	4968	rundll32.exe	99
PID 4968 wrote to memory of 4556	4968	rundll32.exe	99
PID 4968 wrote to memory of 4556	4968	rundll32.exe	99
PID 4556 wrote to memory of 4596	4556	rundll32.exe	100
PID 4556 wrote to memory of 4596	4556	rundll32.exe	100
PID 4556 wrote to memory of 4596	4556	rundll32.exe	100
PID 4596 wrote to memory of 3884	4596	rundll32.exe	101
PID 4596 wrote to memory of 3884	4596	rundll32.exe	101
PID 4596 wrote to memory of 3884	4596	rundll32.exe	101
PID 3884 wrote to memory of 3184	3884	rundll32.exe	102
PID 3884 wrote to memory of 3184	3884	rundll32.exe	102
PID 3884 wrote to memory of 3184	3884	rundll32.exe	102
PID 3184 wrote to memory of 4944	3184	rundll32.exe	103

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4932
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3172
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3924
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3508
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1792
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:2588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        8⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:3204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:5008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:1020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:4128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:4668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        17⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        21⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:3184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        23⤵
        
        PID:4944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        24⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        25⤵
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        26⤵
        
        PID:1836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        27⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        28⤵
        
        PID:3264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        29⤵
        
        PID:2776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        30⤵
        
        PID:2436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        31⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        32⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        33⤵
        
        PID:1060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        34⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        35⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        36⤵
        System Location Discovery: System Language Discovery
        
        PID:3932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        37⤵
        
        PID:3132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        38⤵
        
        PID:3120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        39⤵
        
        PID:3068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        40⤵
        
        PID:2696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        41⤵
        
        PID:3776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        42⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        43⤵
        
        PID:2452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        44⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        45⤵
        
        PID:4088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        46⤵
        
        PID:4876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        47⤵
        
        PID:4768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        48⤵
        
        PID:1184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        49⤵
        
        PID:3712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        50⤵
        
        PID:548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        51⤵
        
        PID:440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        52⤵
        
        PID:2480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        53⤵
        System Location Discovery: System Language Discovery
        
        PID:4032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        54⤵
        
        PID:1376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        55⤵
        
        PID:244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        56⤵
        
        PID:4276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        57⤵
        
        PID:1140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        58⤵
        
        PID:2532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        59⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        60⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        61⤵
        
        PID:1748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        62⤵
        System Location Discovery: System Language Discovery
        
        PID:1804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        63⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        64⤵
        
        PID:3200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        65⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        66⤵
        
        PID:516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        67⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        68⤵
        
        PID:3388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        69⤵
        
        PID:2404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        70⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        71⤵
        
        PID:4512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        72⤵
        
        PID:1352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        73⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        74⤵
        
        PID:2720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        75⤵
        
        PID:816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        76⤵
        
        PID:3496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        77⤵
        
        PID:764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        78⤵
        
        PID:3792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        79⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        80⤵
        
        PID:4752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        81⤵
        
        PID:1152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        82⤵
        
        PID:2068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        83⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        84⤵
        
        PID:1012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        85⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        86⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        87⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        88⤵
        System Location Discovery: System Language Discovery
        
        PID:4896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        89⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        90⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        91⤵
        System Location Discovery: System Language Discovery
        
        PID:636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        92⤵
        
        PID:2236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        93⤵
        System Location Discovery: System Language Discovery
        
        PID:1824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        94⤵
        
        PID:760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        95⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        96⤵
        
        PID:3844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        97⤵
        
        PID:3420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        98⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        99⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        100⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        101⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        102⤵
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        103⤵
        
        PID:3516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        104⤵
        
        PID:2952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        105⤵
        
        PID:3152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        106⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        107⤵
        
        PID:432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        108⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        109⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        110⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        111⤵
        
        PID:1432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        112⤵
        
        PID:1008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        113⤵
        
        PID:1596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        114⤵
        
        PID:1216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        115⤵
        
        PID:216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        116⤵
        
        PID:1944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        117⤵
        
        PID:4176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        118⤵
        
        PID:4316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        119⤵
        
        PID:4304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        120⤵
        System Location Discovery: System Language Discovery
        
        PID:2580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        121⤵
        
        PID:2228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        122⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        123⤵
        
        PID:2308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        124⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        125⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        126⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        127⤵
        
        PID:5144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        128⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        129⤵
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        130⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        131⤵
        
        PID:5208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        132⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        133⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        134⤵
        
        PID:5252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        135⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        136⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        137⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        138⤵
        
        PID:5312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        139⤵
        System Location Discovery: System Language Discovery
        
        PID:5328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        140⤵
        System Location Discovery: System Language Discovery
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        141⤵
        
        PID:5360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        142⤵
        
        PID:5376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        143⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        144⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        145⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        146⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        147⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        148⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        149⤵
        System Location Discovery: System Language Discovery
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        150⤵
        System Location Discovery: System Language Discovery
        
        PID:5492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        151⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        152⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        153⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        154⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        155⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        156⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        157⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        158⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        159⤵
        
        PID:5620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        160⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        161⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        162⤵
        
        PID:5664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        163⤵
        System Location Discovery: System Language Discovery
        
        PID:5680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        164⤵
        
        PID:5696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        165⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        166⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        167⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        168⤵
        System Location Discovery: System Language Discovery
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        169⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        170⤵
        
        PID:5788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        171⤵
        
        PID:5804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        172⤵
        
        PID:5820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        173⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        174⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        175⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        176⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        177⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        178⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        179⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        180⤵
        System Location Discovery: System Language Discovery
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        181⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        182⤵
        
        PID:5964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        183⤵
        
        PID:5976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        184⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        185⤵
        System Location Discovery: System Language Discovery
        
        PID:6008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        186⤵
        
        PID:6024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        187⤵
        
        PID:6040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        188⤵
        
        PID:6056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        189⤵
        
        PID:6072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        190⤵
        
        PID:6088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        191⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        192⤵
        
        PID:6120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        193⤵
        System Location Discovery: System Language Discovery
        
        PID:6136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        194⤵
        
        PID:6156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        195⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        196⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        197⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        198⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        199⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        200⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        201⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        202⤵
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        203⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        204⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        205⤵
        System Location Discovery: System Language Discovery
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        206⤵
        
        PID:6356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        207⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        208⤵
        
        PID:6388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        209⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        210⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        211⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        212⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        213⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        214⤵
        
        PID:6476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        215⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        216⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        217⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        218⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        219⤵
        System Location Discovery: System Language Discovery
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        220⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        221⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        222⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        223⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        224⤵
        System Location Discovery: System Language Discovery
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        225⤵
        
        PID:6640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        226⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        227⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        228⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        229⤵
        
        PID:6704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        230⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        231⤵
        System Location Discovery: System Language Discovery
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        232⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        233⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        234⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        235⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        236⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        237⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        238⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        239⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        240⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        241⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        242⤵
        
        PID:6892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        243⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        244⤵
        
        PID:6924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        245⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        246⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        247⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        248⤵
        System Location Discovery: System Language Discovery
        
        PID:6984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        249⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        250⤵
        
        PID:7020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        251⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        252⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        253⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        254⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        255⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        256⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        257⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        258⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        259⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        260⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        261⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        262⤵
        System Location Discovery: System Language Discovery
        
        PID:7196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        263⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        264⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        265⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        266⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        267⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        268⤵
        System Location Discovery: System Language Discovery
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        269⤵
        
        PID:7348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        270⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        271⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        272⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        273⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        274⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        275⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        276⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        277⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        278⤵
        
        PID:7480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        279⤵
        
        PID:7500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        280⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        281⤵
        
        PID:7532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        282⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        283⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        284⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        285⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        286⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        287⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        288⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        289⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        290⤵
        
        PID:7656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        291⤵
        
        PID:7672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        292⤵
        
        PID:7688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        293⤵
        
        PID:7700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        294⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        295⤵
        
        PID:7724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        296⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        297⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        298⤵
        
        PID:7768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        299⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        300⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        301⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        302⤵
        
        PID:7844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        303⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        304⤵
        
        PID:7904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        305⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        306⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        307⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        308⤵
        
        PID:8024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        309⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        310⤵
        
        PID:8108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        311⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        312⤵
        
        PID:8140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        313⤵
        
        PID:8156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        314⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        315⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        316⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        317⤵
        
        PID:8232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        318⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        319⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        320⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        321⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        322⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        323⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        324⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        325⤵
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        326⤵
        
        PID:8376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        327⤵
        
        PID:8388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        328⤵
        
        PID:8400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        329⤵
        
        PID:8416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        330⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        331⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        332⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        333⤵
        System Location Discovery: System Language Discovery
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        334⤵
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        335⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        336⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        337⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        338⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        339⤵
        
        PID:8568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        340⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        341⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        342⤵
        
        PID:8612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        343⤵
        System Location Discovery: System Language Discovery
        
        PID:8628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        344⤵
        
        PID:8640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        345⤵
        System Location Discovery: System Language Discovery
        
        PID:8656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        346⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        347⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        348⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        349⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        350⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        351⤵
        
        PID:8748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        352⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        353⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        354⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        355⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        356⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        357⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        358⤵
        
        PID:8852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        359⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        360⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        361⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        362⤵
        
        PID:8924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        363⤵
        
        PID:8940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        364⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        365⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        366⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        367⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        368⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        369⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        370⤵
        
        PID:9044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        371⤵
        
        PID:9060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        372⤵
        
        PID:9072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        373⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        374⤵
        
        PID:9104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        375⤵
        System Location Discovery: System Language Discovery
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        376⤵
        
        PID:9136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        377⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        378⤵
        
        PID:9168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        379⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        380⤵
        
        PID:9200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        381⤵
        
        PID:8292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        382⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        383⤵
        System Location Discovery: System Language Discovery
        
        PID:9248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        384⤵
        
        PID:9264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        385⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        386⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        387⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        388⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        389⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        390⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        391⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        392⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        393⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        394⤵
        System Location Discovery: System Language Discovery
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        395⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        396⤵
        
        PID:9456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        397⤵
        
        PID:9472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        398⤵
        
        PID:9488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        399⤵
        
        PID:9504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        400⤵
        
        PID:9520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        401⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        402⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        403⤵
        System Location Discovery: System Language Discovery
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        404⤵
        
        PID:9588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        405⤵
        
        PID:9604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        406⤵
        
        PID:9636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        407⤵
        
        PID:9664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        408⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        409⤵
        System Location Discovery: System Language Discovery
        
        PID:9696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        410⤵
        
        PID:9712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        411⤵
        
        PID:9732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        412⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        413⤵
        
        PID:9764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        414⤵
        System Location Discovery: System Language Discovery
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        415⤵
        
        PID:9796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        416⤵
        
        PID:9812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        417⤵
        
        PID:9828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        418⤵
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        419⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        420⤵
        
        PID:9876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        421⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        422⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        423⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        424⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        425⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        426⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        427⤵
        
        PID:9988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        428⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        429⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        430⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        431⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        432⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        433⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        434⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        435⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        436⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        437⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        438⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        439⤵
        System Location Discovery: System Language Discovery
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        440⤵
        
        PID:10192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        441⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        442⤵
        System Location Discovery: System Language Discovery
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        443⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        444⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        445⤵
        
        PID:10264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        446⤵
        System Location Discovery: System Language Discovery
        
        PID:10280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        447⤵
        
        PID:10296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        448⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        449⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        450⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        451⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        452⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        453⤵
        
        PID:10388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        454⤵
        
        PID:10404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        455⤵
        System Location Discovery: System Language Discovery
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        456⤵
        
        PID:10436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        457⤵
        
        PID:10448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        458⤵
        
        PID:10464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        459⤵
        
        PID:10480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        460⤵
        
        PID:10496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        461⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        462⤵
        
        PID:10528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        463⤵
        
        PID:10544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        464⤵
        
        PID:10560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        465⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        466⤵
        
        PID:10588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        467⤵
        
        PID:10608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        468⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        469⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        470⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        471⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        472⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        473⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        474⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        475⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        476⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        477⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        478⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        479⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        480⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        481⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        482⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        483⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        484⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        485⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        486⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        487⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        488⤵
        System Location Discovery: System Language Discovery
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        489⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        490⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        491⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        492⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        493⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        494⤵
        
        PID:11020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        495⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        496⤵
        System Location Discovery: System Language Discovery
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        497⤵
        System Location Discovery: System Language Discovery
        
        PID:11064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        498⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        499⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        500⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        501⤵
        
        PID:11124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        502⤵
        
        PID:11140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        503⤵
        
        PID:11156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        504⤵
        
        PID:11172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        505⤵
        
        PID:11188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        506⤵
        
        PID:11204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        507⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        508⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        509⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        510⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        511⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        512⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        513⤵
        
        PID:11424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        514⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        515⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        516⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        517⤵
        
        PID:11508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        518⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        519⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        520⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        521⤵
        
        PID:11568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        522⤵
        
        PID:11580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        523⤵
        
        PID:11596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        524⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        525⤵
        
        PID:11624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        526⤵
        
        PID:11640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        527⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        528⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        529⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        530⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        531⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        532⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        533⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        534⤵
        
        PID:11772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        535⤵
        
        PID:11788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        536⤵
        
        PID:11804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        537⤵
        
        PID:11820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        538⤵
        
        PID:11836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        539⤵
        
        PID:11852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        540⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        541⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        542⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        543⤵
        
        PID:11908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        544⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        545⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        546⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        547⤵
        
        PID:11972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        548⤵
        
        PID:11988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        549⤵
        
        PID:12004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        550⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        551⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        552⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        553⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        554⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        555⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        556⤵
        
        PID:12116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        557⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        558⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        559⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        560⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        561⤵
        
        PID:12192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        562⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        563⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        564⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        565⤵
        
        PID:12264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        566⤵
        
        PID:12280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        567⤵
        System Location Discovery: System Language Discovery
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        568⤵
        
        PID:12304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        569⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        570⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        571⤵
        
        PID:12348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        572⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        573⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        574⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        575⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        576⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        577⤵
        
        PID:12444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        578⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        579⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        580⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        581⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        582⤵
        System Location Discovery: System Language Discovery
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        583⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        584⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        585⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        586⤵
        
        PID:12584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        587⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        588⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        589⤵
        
        PID:12628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        590⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        591⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        592⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        593⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        594⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        595⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        596⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        597⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        598⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        599⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        600⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        601⤵
        
        PID:12812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        602⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        603⤵
        System Location Discovery: System Language Discovery
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        604⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        605⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        606⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        607⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        608⤵
        
        PID:12956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        609⤵
        
        PID:12968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        610⤵
        
        PID:12984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        611⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        612⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        613⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        614⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        615⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        616⤵
        
        PID:13080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        617⤵
        
        PID:13092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        618⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        619⤵
        
        PID:13132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        620⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        621⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        622⤵
        
        PID:13188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        623⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        624⤵
        
        PID:13220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        625⤵
        System Location Discovery: System Language Discovery
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        626⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        627⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        628⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        629⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        630⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        631⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        632⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        633⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        634⤵
        System Location Discovery: System Language Discovery
        
        PID:7264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        635⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        636⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        637⤵
        
        PID:13328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        638⤵
        
        PID:13344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        639⤵
        
        PID:13356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        640⤵
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        641⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        642⤵
        
        PID:13404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        643⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        644⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        645⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        646⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        647⤵
        System Location Discovery: System Language Discovery
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        648⤵
        
        PID:13492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        649⤵
        
        PID:13508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        650⤵
        
        PID:13524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        651⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        652⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        653⤵
        
        PID:13572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        654⤵
        
        PID:13588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        655⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        656⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        657⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        658⤵
        
        PID:13652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        659⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        660⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        661⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        662⤵
        
        PID:13728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        663⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        664⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        665⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        666⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        667⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        668⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        669⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        670⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        671⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        672⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        673⤵
        
        PID:13888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        674⤵
        
        PID:13904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        675⤵
        
        PID:13920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        676⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        677⤵
        System Location Discovery: System Language Discovery
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        678⤵
        
        PID:13960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        679⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        680⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        681⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        682⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        683⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        684⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        685⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        686⤵
        
        PID:14080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        687⤵
        
        PID:14096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        688⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        689⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        690⤵
        
        PID:14144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        691⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        692⤵
        
        PID:14176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        693⤵
        
        PID:14192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        694⤵
        System Location Discovery: System Language Discovery
        
        PID:14204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        695⤵
        
        PID:14216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        696⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        697⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        698⤵
        System Location Discovery: System Language Discovery
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        699⤵
        
        PID:14280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        700⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        701⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        702⤵
        
        PID:14328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        703⤵
        
        PID:8012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        704⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        705⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        706⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        707⤵
        
        PID:14384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        708⤵
        
        PID:14400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        709⤵
        
        PID:14416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        710⤵
        
        PID:14432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        711⤵
        System Location Discovery: System Language Discovery
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        712⤵
        
        PID:14464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        713⤵
        
        PID:14476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        714⤵
        
        PID:14492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        715⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        716⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        717⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        718⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        719⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        720⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        721⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        722⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        723⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        724⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        725⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        726⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        727⤵
        
        PID:14692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        728⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        729⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        730⤵
        
        PID:14740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        731⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        732⤵
        
        PID:14764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        733⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        734⤵
        
        PID:14796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        735⤵
        System Location Discovery: System Language Discovery
        
        PID:14808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        736⤵
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        737⤵
        
        PID:14840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        738⤵
        
        PID:14856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        739⤵
        
        PID:14872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        740⤵
        
        PID:14888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        741⤵
        
        PID:14904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        742⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        743⤵
        
        PID:14932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        744⤵
        
        PID:14948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        745⤵
        System Location Discovery: System Language Discovery
        
        PID:14964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        746⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        747⤵
        
        PID:14992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        748⤵
        
        PID:15008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        749⤵
        
        PID:15024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        750⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        751⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        752⤵
        
        PID:15072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        753⤵
        
        PID:15088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        754⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        755⤵
        
        PID:15116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        756⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        757⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        758⤵
        
        PID:15164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        759⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        760⤵
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        761⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        762⤵
        System Location Discovery: System Language Discovery
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        763⤵
        
        PID:15240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        764⤵
        
        PID:15256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        765⤵
        
        PID:15268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        766⤵
        
        PID:15284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        767⤵
        
        PID:15300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        768⤵
        
        PID:15312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        769⤵
        
        PID:15328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        770⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        771⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        772⤵
        
        PID:15368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        773⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        774⤵
        
        PID:15396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        775⤵
        
        PID:15412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        776⤵
        System Location Discovery: System Language Discovery
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        777⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        778⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        779⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        780⤵
        
        PID:15484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        781⤵
        System Location Discovery: System Language Discovery
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        782⤵
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        783⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        784⤵
        
        PID:15544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        785⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        786⤵
        
        PID:15572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        787⤵
        
        PID:15588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        788⤵
        
        PID:15604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        789⤵
        
        PID:15620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        790⤵
        
        PID:15632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        791⤵
        
        PID:15648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        792⤵
        
        PID:15664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        793⤵
        
        PID:15680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        794⤵
        
        PID:15692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        795⤵
        
        PID:15708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        796⤵
        
        PID:15724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        797⤵
        
        PID:15740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        798⤵
        
        PID:15756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        799⤵
        
        PID:15772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        800⤵
        
        PID:15784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        801⤵
        
        PID:15800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        802⤵
        
        PID:15816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        803⤵
        
        PID:15832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        804⤵
        
        PID:15844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        805⤵
        
        PID:15864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        806⤵
        
        PID:15880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        807⤵
        
        PID:15896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        808⤵
        
        PID:15908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        809⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        810⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        811⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        812⤵
        System Location Discovery: System Language Discovery
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        813⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        814⤵
        
        PID:16000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        815⤵
        System Location Discovery: System Language Discovery
        
        PID:16016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        816⤵
        
        PID:16032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        817⤵
        
        PID:16048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        818⤵
        
        PID:16064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        819⤵
        
        PID:16080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        820⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        821⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        822⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        823⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        824⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        825⤵
        
        PID:16164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        826⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        827⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        828⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        829⤵
        
        PID:16224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        830⤵
        
        PID:16240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        831⤵
        
        PID:16256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        832⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        833⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        834⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        835⤵
        System Location Discovery: System Language Discovery
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        836⤵
        System Location Discovery: System Language Discovery
        
        PID:16332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        837⤵
        
        PID:16348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        838⤵
        System Location Discovery: System Language Discovery
        
        PID:16364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        839⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        840⤵
        
        PID:4620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        841⤵
        System Location Discovery: System Language Discovery
        
        PID:16396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        842⤵
        
        PID:16412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        843⤵
        
        PID:16428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        844⤵
        
        PID:16444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        845⤵
        
        PID:16456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        846⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        847⤵
        
        PID:16488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        848⤵
        
        PID:16504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        849⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        850⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        851⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        852⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        853⤵
        
        PID:16584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        854⤵
        
        PID:16600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        855⤵
        
        PID:16616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        856⤵
        
        PID:16632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        857⤵
        
        PID:16644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        858⤵
        
        PID:16656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        859⤵
        
        PID:16676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        860⤵
        
        PID:16692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        861⤵
        
        PID:16708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        862⤵
        
        PID:16724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        863⤵
        
        PID:16740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        864⤵
        
        PID:16756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        865⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        866⤵
        
        PID:16784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        867⤵
        
        PID:16796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        868⤵
        
        PID:16812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2bf705280dadfe779f806709e0d6b2d.dll,#1
        869⤵
        
        PID:16828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads