47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 09:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll
Size

603KB
MD5

87b5c6301ed970fc7edbe11383503720
SHA1

de0d06aa964782f90d264fb7cea793a3a3987e38
SHA256

47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5
SHA512

f482f6058bd2f96e8c9dc9fb7d6ec92694dede5a0db3a4e9fbb18e0b5d659191890da9d7fec99b6a694e81358699798652968511f7f2b0a7c3a10cd1f500cce0
SSDEEP

12288:96JBfGXs/e6ktwRmdbOK6xD3eslpnpHhGNqNLQwgC+9zUp3t:mBfm5BtwRObOKrslLHsqLgzU3

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5080 wrote to memory of 540	5080	rundll32.exe	76
PID 5080 wrote to memory of 540	5080	rundll32.exe	76
PID 5080 wrote to memory of 540	5080	rundll32.exe	76
PID 540 wrote to memory of 3284	540	rundll32.exe	77
PID 540 wrote to memory of 3284	540	rundll32.exe	77
PID 540 wrote to memory of 3284	540	rundll32.exe	77
PID 3284 wrote to memory of 2464	3284	rundll32.exe	78
PID 3284 wrote to memory of 2464	3284	rundll32.exe	78
PID 3284 wrote to memory of 2464	3284	rundll32.exe	78
PID 2464 wrote to memory of 2324	2464	rundll32.exe	79
PID 2464 wrote to memory of 2324	2464	rundll32.exe	79
PID 2464 wrote to memory of 2324	2464	rundll32.exe	79
PID 2324 wrote to memory of 4144	2324	rundll32.exe	80
PID 2324 wrote to memory of 4144	2324	rundll32.exe	80
PID 2324 wrote to memory of 4144	2324	rundll32.exe	80
PID 4144 wrote to memory of 3196	4144	rundll32.exe	81
PID 4144 wrote to memory of 3196	4144	rundll32.exe	81
PID 4144 wrote to memory of 3196	4144	rundll32.exe	81
PID 3196 wrote to memory of 1952	3196	rundll32.exe	82
PID 3196 wrote to memory of 1952	3196	rundll32.exe	82
PID 3196 wrote to memory of 1952	3196	rundll32.exe	82
PID 1952 wrote to memory of 912	1952	rundll32.exe	83
PID 1952 wrote to memory of 912	1952	rundll32.exe	83
PID 1952 wrote to memory of 912	1952	rundll32.exe	83
PID 912 wrote to memory of 1660	912	rundll32.exe	84
PID 912 wrote to memory of 1660	912	rundll32.exe	84
PID 912 wrote to memory of 1660	912	rundll32.exe	84
PID 1660 wrote to memory of 2392	1660	rundll32.exe	85
PID 1660 wrote to memory of 2392	1660	rundll32.exe	85
PID 1660 wrote to memory of 2392	1660	rundll32.exe	85
PID 2392 wrote to memory of 3212	2392	rundll32.exe	86
PID 2392 wrote to memory of 3212	2392	rundll32.exe	86
PID 2392 wrote to memory of 3212	2392	rundll32.exe	86
PID 3212 wrote to memory of 2892	3212	rundll32.exe	87
PID 3212 wrote to memory of 2892	3212	rundll32.exe	87
PID 3212 wrote to memory of 2892	3212	rundll32.exe	87
PID 2892 wrote to memory of 4452	2892	rundll32.exe	88
PID 2892 wrote to memory of 4452	2892	rundll32.exe	88
PID 2892 wrote to memory of 4452	2892	rundll32.exe	88
PID 4452 wrote to memory of 1176	4452	rundll32.exe	89
PID 4452 wrote to memory of 1176	4452	rundll32.exe	89
PID 4452 wrote to memory of 1176	4452	rundll32.exe	89
PID 1176 wrote to memory of 1532	1176	rundll32.exe	90
PID 1176 wrote to memory of 1532	1176	rundll32.exe	90
PID 1176 wrote to memory of 1532	1176	rundll32.exe	90
PID 1532 wrote to memory of 2352	1532	rundll32.exe	91
PID 1532 wrote to memory of 2352	1532	rundll32.exe	91
PID 1532 wrote to memory of 2352	1532	rundll32.exe	91
PID 2352 wrote to memory of 3092	2352	rundll32.exe	92
PID 2352 wrote to memory of 3092	2352	rundll32.exe	92
PID 2352 wrote to memory of 3092	2352	rundll32.exe	92
PID 3092 wrote to memory of 1688	3092	rundll32.exe	93
PID 3092 wrote to memory of 1688	3092	rundll32.exe	93
PID 3092 wrote to memory of 1688	3092	rundll32.exe	93
PID 1688 wrote to memory of 3140	1688	rundll32.exe	94
PID 1688 wrote to memory of 3140	1688	rundll32.exe	94
PID 1688 wrote to memory of 3140	1688	rundll32.exe	94
PID 3140 wrote to memory of 4944	3140	rundll32.exe	95
PID 3140 wrote to memory of 4944	3140	rundll32.exe	95
PID 3140 wrote to memory of 4944	3140	rundll32.exe	95
PID 4944 wrote to memory of 4980	4944	rundll32.exe	96
PID 4944 wrote to memory of 4980	4944	rundll32.exe	96
PID 4944 wrote to memory of 4980	4944	rundll32.exe	96
PID 4980 wrote to memory of 1444	4980	rundll32.exe	97

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5080
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:540
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3284
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2464
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2324
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:4144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:1952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:1660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:2392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:2892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:4452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:1176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:4944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        23⤵
        
        PID:1444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        24⤵
        
        PID:5068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        25⤵
        
        PID:3164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        26⤵
        
        PID:3036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        27⤵
        
        PID:4800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        28⤵
        
        PID:4372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        29⤵
        
        PID:3916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        30⤵
        
        PID:3588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        31⤵
        
        PID:4552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        32⤵
        
        PID:756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        33⤵
        
        PID:4236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        34⤵
        
        PID:3568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        35⤵
        
        PID:4216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        36⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        37⤵
        
        PID:1112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        38⤵
        
        PID:4156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        39⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        40⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        41⤵
        
        PID:2032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        42⤵
        
        PID:2448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        43⤵
        
        PID:3920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        44⤵
        
        PID:4232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        45⤵
        
        PID:1344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        46⤵
        
        PID:4320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        47⤵
        
        PID:2540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        48⤵
        
        PID:2244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        49⤵
        
        PID:216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        50⤵
        
        PID:2776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        51⤵
        
        PID:484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        52⤵
        
        PID:2228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        53⤵
        
        PID:4576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        54⤵
        
        PID:4468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        55⤵
        
        PID:548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        56⤵
        
        PID:4088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        57⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        58⤵
        
        PID:4648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        59⤵
        
        PID:2844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        60⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        61⤵
        
        PID:876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        62⤵
        
        PID:3456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        63⤵
        
        PID:3168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        64⤵
        
        PID:4316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        65⤵
        
        PID:1540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        66⤵
        
        PID:2664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        67⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        68⤵
        
        PID:4484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        69⤵
        
        PID:1484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        70⤵
        
        PID:5048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        71⤵
        
        PID:3552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        72⤵
        
        PID:3696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        73⤵
        
        PID:4616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        74⤵
        
        PID:2556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        75⤵
        
        PID:4560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        76⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        77⤵
        
        PID:4752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        78⤵
        
        PID:4152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        79⤵
        
        PID:1300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        80⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        81⤵
        
        PID:4084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        82⤵
        
        PID:392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        83⤵
        
        PID:732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        84⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        85⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        86⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        87⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        88⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        89⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        90⤵
        
        PID:4916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        91⤵
        
        PID:1292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        92⤵
        
        PID:4764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        93⤵
        
        PID:1224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        94⤵
        
        PID:5072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        95⤵
        
        PID:4680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        96⤵
        
        PID:2628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        97⤵
        
        PID:1100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        98⤵
        
        PID:3180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        99⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        100⤵
        
        PID:3148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        101⤵
        
        PID:1748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        102⤵
        
        PID:4100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        103⤵
        
        PID:4104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        104⤵
        
        PID:2476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        105⤵
        
        PID:480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        106⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        107⤵
        
        PID:3820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        108⤵
        
        PID:452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        109⤵
        
        PID:4700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        110⤵
        
        PID:5060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        111⤵
        
        PID:3132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        112⤵
        
        PID:4412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        113⤵
        
        PID:4832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        114⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        115⤵
        
        PID:4512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        116⤵
        
        PID:4092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        117⤵
        
        PID:1988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        118⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        119⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        120⤵
        
        PID:4220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        121⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        122⤵
        
        PID:1284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        123⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        124⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        125⤵
        
        PID:4456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        126⤵
        
        PID:2616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        127⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        128⤵
        
        PID:2648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        129⤵
        
        PID:2676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        130⤵
        
        PID:444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        131⤵
        
        PID:2172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        132⤵
        
        PID:372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        133⤵
        
        PID:204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        134⤵
        
        PID:624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        135⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        136⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        137⤵
        
        PID:976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        138⤵
        
        PID:5132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        139⤵
        
        PID:5144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        140⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        141⤵
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        142⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        143⤵
        
        PID:5208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        144⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        145⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        146⤵
        
        PID:5252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        147⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        148⤵
        
        PID:5284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        149⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        150⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        151⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        152⤵
        
        PID:5348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        153⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        154⤵
        
        PID:5376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        155⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        156⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        157⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        158⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        159⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        160⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        161⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        162⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        163⤵
        
        PID:5516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        164⤵
        
        PID:5532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        165⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        166⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        167⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        168⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        169⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        170⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        171⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        172⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        173⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        174⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        175⤵
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        176⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        177⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        178⤵
        
        PID:5752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        179⤵
        
        PID:5764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        180⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        181⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        182⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        183⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        184⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        185⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        186⤵
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        187⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        188⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        189⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        190⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        191⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        192⤵
        
        PID:5964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        193⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        194⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        195⤵
        
        PID:6016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        196⤵
        
        PID:6028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        197⤵
        
        PID:6048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        198⤵
        
        PID:6060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        199⤵
        
        PID:6072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        200⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        201⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        202⤵
        
        PID:6116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        203⤵
        
        PID:6132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        204⤵
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        205⤵
        
        PID:6168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        206⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        207⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        208⤵
        
        PID:6212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        209⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        210⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        211⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        212⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        213⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        214⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        215⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        216⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        217⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        218⤵
        
        PID:6360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        219⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        220⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        221⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        222⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        223⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        224⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        225⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        226⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        227⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        228⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        229⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        230⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        231⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        232⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        233⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        234⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        235⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        236⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        237⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        238⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        239⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        240⤵
        
        PID:6704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        241⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        242⤵
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        243⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        244⤵
        
        PID:6768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        245⤵
        
        PID:6780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        246⤵
        
        PID:6800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        247⤵
        
        PID:6816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        248⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        249⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        250⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        251⤵
        
        PID:6880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        252⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        253⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        254⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        255⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        256⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        257⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        258⤵
        
        PID:6992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        259⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        260⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        261⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        262⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        263⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        264⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        265⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        266⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        267⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        268⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        269⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        270⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        271⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        272⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        273⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        274⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        275⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        276⤵
        
        PID:7276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        277⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        278⤵
        
        PID:7308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        279⤵
        
        PID:7324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        280⤵
        
        PID:7336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        281⤵
        
        PID:7356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        282⤵
        
        PID:7372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        283⤵
        
        PID:7388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        284⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        285⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        286⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        287⤵
        
        PID:7448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        288⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        289⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        290⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        291⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        292⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        293⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        294⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        295⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        296⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        297⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        298⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        299⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        300⤵
        
        PID:7640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        301⤵
        
        PID:7656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        302⤵
        
        PID:7672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        303⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        304⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        305⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        306⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        307⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        308⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        309⤵
        
        PID:7776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        310⤵
        
        PID:7792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        311⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        312⤵
        
        PID:7820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        313⤵
        
        PID:7832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        314⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        315⤵
        
        PID:7864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        316⤵
        
        PID:7880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        317⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        318⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        319⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        320⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        321⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        322⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        323⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        324⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        325⤵
        
        PID:8020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        326⤵
        
        PID:8036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        327⤵
        
        PID:8052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        328⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        329⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        330⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        331⤵
        
        PID:8108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        332⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        333⤵
        
        PID:8140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        334⤵
        
        PID:8156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        335⤵
        
        PID:8168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        336⤵
        
        PID:8184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        337⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        338⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        339⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        340⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        341⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        342⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        343⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        344⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        345⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        346⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        347⤵
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        348⤵
        
        PID:8376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        349⤵
        
        PID:8392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        350⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        351⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        352⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        353⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        354⤵
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        355⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        356⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        357⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        358⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        359⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        360⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        361⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        362⤵
        
        PID:8592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        363⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        364⤵
        
        PID:8624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        365⤵
        
        PID:8644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        366⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        367⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        368⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        369⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        370⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        371⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        372⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        373⤵
        
        PID:8820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        374⤵
        
        PID:8836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        375⤵
        
        PID:8852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        376⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        377⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        378⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        379⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        380⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        381⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        382⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        383⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        384⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        385⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        386⤵
        
        PID:9024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        387⤵
        
        PID:9040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        388⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        389⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        390⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        391⤵
        
        PID:9100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        392⤵
        
        PID:9116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        393⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        394⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        395⤵
        
        PID:9164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        396⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        397⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        398⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        399⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        400⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        401⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        402⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        403⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        404⤵
        
        PID:9284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        405⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        406⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        407⤵
        
        PID:9332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        408⤵
        
        PID:9348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        409⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        410⤵
        
        PID:9380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        411⤵
        
        PID:9396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        412⤵
        
        PID:9412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        413⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        414⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        415⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        416⤵
        
        PID:9476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        417⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        418⤵
        
        PID:9504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        419⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        420⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        421⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        422⤵
        
        PID:9572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        423⤵
        
        PID:9588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        424⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        425⤵
        
        PID:9616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        426⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        427⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        428⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        429⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        430⤵
        
        PID:9696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        431⤵
        
        PID:9724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        432⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        433⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        434⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        435⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        436⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        437⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        438⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        439⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        440⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        441⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        442⤵
        
        PID:9896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        443⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        444⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        445⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        446⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        447⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        448⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        449⤵
        
        PID:10000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        450⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        451⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        452⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        453⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        454⤵
        
        PID:10084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        455⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        456⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        457⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        458⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        459⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        460⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        461⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        462⤵
        
        PID:10212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        463⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        464⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        465⤵
        
        PID:4068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        466⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        467⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        468⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        469⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        470⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        471⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        472⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        473⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        474⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        475⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        476⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        477⤵
        
        PID:10436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        478⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        479⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        480⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        481⤵
        
        PID:10524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        482⤵
        
        PID:10560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        483⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        484⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        485⤵
        
        PID:10608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        486⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        487⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        488⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        489⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        490⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        491⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        492⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        493⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        494⤵
        
        PID:10752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        495⤵
        
        PID:10768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        496⤵
        
        PID:10780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        497⤵
        
        PID:10796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        498⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        499⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        500⤵
        
        PID:10844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        501⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        502⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        503⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        504⤵
        
        PID:10900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        505⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        506⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        507⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        508⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        509⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        510⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        511⤵
        
        PID:11036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        512⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        513⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        514⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        515⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        516⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        517⤵
        
        PID:11140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        518⤵
        
        PID:11156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        519⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        520⤵
        
        PID:11216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        521⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        522⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        523⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        524⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        525⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        526⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        527⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        528⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        529⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        530⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        531⤵
        
        PID:11468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        532⤵
        
        PID:11496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        533⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        534⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        535⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        536⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        537⤵
        
        PID:11592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        538⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        539⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        540⤵
        
        PID:11636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        541⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        542⤵
        
        PID:11680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        543⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        544⤵
        
        PID:11712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        545⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        546⤵
        
        PID:11744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        547⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        548⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        549⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        550⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        551⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        552⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        553⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        554⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        555⤵
        
        PID:11916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        556⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        557⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        558⤵
        
        PID:11964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        559⤵
        
        PID:11980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        560⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        561⤵
        
        PID:12012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        562⤵
        
        PID:12028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        563⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        564⤵
        
        PID:12060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        565⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        566⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        567⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        568⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        569⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        570⤵
        
        PID:12152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        571⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        572⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        573⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        574⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        575⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        576⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        577⤵
        
        PID:12256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        578⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        579⤵
        
        PID:12280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        580⤵
        
        PID:12292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        581⤵
        
        PID:12304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        582⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        583⤵
        
        PID:12332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        584⤵
        
        PID:12348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        585⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        586⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        587⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        588⤵
        
        PID:12408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        589⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        590⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        591⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        592⤵
        
        PID:12468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        593⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        594⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        595⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        596⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        597⤵
        
        PID:12548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        598⤵
        
        PID:12564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        599⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        600⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        601⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        602⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        603⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        604⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        605⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        606⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        607⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        608⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        609⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        610⤵
        
        PID:12776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        611⤵
        
        PID:12792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        612⤵
        
        PID:12808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        613⤵
        
        PID:12824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        614⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        615⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        616⤵
        
        PID:12872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        617⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        618⤵
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        619⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        620⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        621⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        622⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        623⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        624⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        625⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        626⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        627⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        628⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        629⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        630⤵
        
        PID:13092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        631⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        632⤵
        
        PID:13124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        633⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        634⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        635⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        636⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        637⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        638⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        639⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        640⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        641⤵
        
        PID:13264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        642⤵
        
        PID:13276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        643⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        644⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        645⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        646⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        647⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        648⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        649⤵
        
        PID:13384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        650⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        651⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        652⤵
        
        PID:13428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        653⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        654⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        655⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        656⤵
        
        PID:13492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        657⤵
        
        PID:13508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        658⤵
        
        PID:13524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        659⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        660⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        661⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        662⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        663⤵
        
        PID:13600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        664⤵
        
        PID:13616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        665⤵
        
        PID:13632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        666⤵
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        667⤵
        
        PID:13664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        668⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        669⤵
        
        PID:13692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        670⤵
        
        PID:13708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        671⤵
        
        PID:13724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        672⤵
        
        PID:13740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        673⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        674⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        675⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        676⤵
        
        PID:13804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        677⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        678⤵
        
        PID:13836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        679⤵
        
        PID:13852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        680⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        681⤵
        
        PID:13880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        682⤵
        
        PID:13896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        683⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        684⤵
        
        PID:13928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        685⤵
        
        PID:13944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        686⤵
        
        PID:13960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        687⤵
        
        PID:13976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        688⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        689⤵
        
        PID:14012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        690⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        691⤵
        
        PID:14080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        692⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        693⤵
        
        PID:14140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        694⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        695⤵
        
        PID:14172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        696⤵
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        697⤵
        
        PID:14228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        698⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        699⤵
        
        PID:14284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        700⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        701⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        702⤵
        
        PID:4228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        703⤵
        
        PID:3808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        704⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        705⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        706⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        707⤵
        
        PID:14416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        708⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        709⤵
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        710⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        711⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        712⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        713⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        714⤵
        
        PID:14536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        715⤵
        
        PID:14548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        716⤵
        
        PID:14564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        717⤵
        
        PID:14580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        718⤵
        
        PID:14596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        719⤵
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        720⤵
        
        PID:14628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        721⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        722⤵
        
        PID:14660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        723⤵
        
        PID:14676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        724⤵
        
        PID:14688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        725⤵
        
        PID:14712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        726⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        727⤵
        
        PID:14740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        728⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        729⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        730⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        731⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        732⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        733⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        734⤵
        
        PID:14844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        735⤵
        
        PID:14860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        736⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        737⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        738⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        739⤵
        
        PID:14928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        740⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        741⤵
        
        PID:14960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        742⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        743⤵
        
        PID:14996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        744⤵
        
        PID:15012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        745⤵
        
        PID:15028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        746⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        747⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        748⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        749⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        750⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        751⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        752⤵
        
        PID:15140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        753⤵
        
        PID:15156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        754⤵
        
        PID:15172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        755⤵
        
        PID:15188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        756⤵
        
        PID:15204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        757⤵
        
        PID:15216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        758⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        759⤵
        
        PID:15248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        760⤵
        
        PID:15264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        761⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        762⤵
        
        PID:15288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        763⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        764⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        765⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        766⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        767⤵
        
        PID:15364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        768⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        769⤵
        
        PID:15396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        770⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        771⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        772⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        773⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        774⤵
        
        PID:15496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        775⤵
        
        PID:15512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        776⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        777⤵
        
        PID:15544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        778⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        779⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        780⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        781⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        782⤵
        
        PID:15624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        783⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        784⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        785⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        786⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        787⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        788⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        789⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        790⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        791⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        792⤵
        
        PID:15780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        793⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        794⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        795⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        796⤵
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        797⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        798⤵
        
        PID:15868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        799⤵
        
        PID:15884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        800⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        801⤵
        
        PID:15912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        802⤵
        
        PID:15928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        803⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        804⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        805⤵
        
        PID:15972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        806⤵
        
        PID:15988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        807⤵
        
        PID:16004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        808⤵
        
        PID:16020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        809⤵
        
        PID:16036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        810⤵
        
        PID:16048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        811⤵
        
        PID:16064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        812⤵
        
        PID:16080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        813⤵
        
        PID:16100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        814⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        815⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        816⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        817⤵
        
        PID:16164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        818⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        819⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        820⤵
        
        PID:16212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        821⤵
        
        PID:16228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        822⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        823⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        824⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        825⤵
        
        PID:16292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        826⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        827⤵
        
        PID:16320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        828⤵
        
        PID:16336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        829⤵
        
        PID:16352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        830⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        831⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        832⤵
        
        PID:2536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        833⤵
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        834⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        835⤵
        
        PID:1756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        836⤵
        
        PID:3076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        837⤵
        
        PID:4984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        838⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        839⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        840⤵
        
        PID:16424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        841⤵
        
        PID:16440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        842⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        843⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        844⤵
        
        PID:16480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        845⤵
        
        PID:16496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        846⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        847⤵
        
        PID:16528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        848⤵
        
        PID:16544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        849⤵
        
        PID:16560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        850⤵
        
        PID:16576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        851⤵
        
        PID:16592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        852⤵
        
        PID:16608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        853⤵
        
        PID:16624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        854⤵
        
        PID:16644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        855⤵
        
        PID:16660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        856⤵
        
        PID:16676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        857⤵
        
        PID:16692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        858⤵
        
        PID:16704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        859⤵
        
        PID:16720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        860⤵
        
        PID:16732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        861⤵
        
        PID:16748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        862⤵
        
        PID:16760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        863⤵
        
        PID:16780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        864⤵
        
        PID:16796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        865⤵
        
        PID:16812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        866⤵
        
        PID:16824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        867⤵
        
        PID:16840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        868⤵
        
        PID:16856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        869⤵
        
        PID:16872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        870⤵
        
        PID:16884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        871⤵
        
        PID:16900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        872⤵
        
        PID:16916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        873⤵
        
        PID:16928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        874⤵
        
        PID:16944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        875⤵
        
        PID:16960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        876⤵
        
        PID:16980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        877⤵
        
        PID:17000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        878⤵
        
        PID:17020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        879⤵
        
        PID:17044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        880⤵
        
        PID:17056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        881⤵
        
        PID:17072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\47f9b5719e4ebaf9fab598f3952cfeee80931ff43cb21184fb1b0ba7948e5ad5.dll,#1
        882⤵
        
        PID:17088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/216-179-0x0000000000000000-mapping.dmp

Download
memory/484-181-0x0000000000000000-mapping.dmp

Download
memory/540-132-0x0000000000000000-mapping.dmp

Download
memory/548-185-0x0000000000000000-mapping.dmp

Download
memory/756-162-0x0000000000000000-mapping.dmp

Download
memory/876-191-0x0000000000000000-mapping.dmp

Download
memory/912-139-0x0000000000000000-mapping.dmp

Download
memory/1112-167-0x0000000000000000-mapping.dmp

Download
memory/1176-145-0x0000000000000000-mapping.dmp

Download
memory/1344-175-0x0000000000000000-mapping.dmp

Download
memory/1444-153-0x0000000000000000-mapping.dmp

Download
memory/1516-187-0x0000000000000000-mapping.dmp

Download
memory/1532-146-0x0000000000000000-mapping.dmp

Download
memory/1540-195-0x0000000000000000-mapping.dmp

Download
memory/1660-140-0x0000000000000000-mapping.dmp

Download
memory/1688-149-0x0000000000000000-mapping.dmp

Download
memory/1952-138-0x0000000000000000-mapping.dmp

Download
memory/2032-171-0x0000000000000000-mapping.dmp

Download
memory/2228-182-0x0000000000000000-mapping.dmp

Download
memory/2244-178-0x0000000000000000-mapping.dmp

Download
memory/2324-135-0x0000000000000000-mapping.dmp

Download
memory/2352-147-0x0000000000000000-mapping.dmp

Download
memory/2392-141-0x0000000000000000-mapping.dmp

Download
memory/2448-172-0x0000000000000000-mapping.dmp

Download
memory/2464-134-0x0000000000000000-mapping.dmp

Download
memory/2540-177-0x0000000000000000-mapping.dmp

Download
memory/2776-180-0x0000000000000000-mapping.dmp

Download
memory/2844-189-0x0000000000000000-mapping.dmp

Download
memory/2892-143-0x0000000000000000-mapping.dmp

Download
memory/3036-156-0x0000000000000000-mapping.dmp

Download
memory/3092-148-0x0000000000000000-mapping.dmp

Download
memory/3140-150-0x0000000000000000-mapping.dmp

Download
memory/3164-155-0x0000000000000000-mapping.dmp

Download
memory/3168-193-0x0000000000000000-mapping.dmp

Download
memory/3196-137-0x0000000000000000-mapping.dmp

Download
memory/3212-142-0x0000000000000000-mapping.dmp

Download
memory/3284-133-0x0000000000000000-mapping.dmp

Download
memory/3456-192-0x0000000000000000-mapping.dmp

Download
memory/3568-164-0x0000000000000000-mapping.dmp

Download
memory/3588-160-0x0000000000000000-mapping.dmp

Download
memory/3916-159-0x0000000000000000-mapping.dmp

Download
memory/3920-173-0x0000000000000000-mapping.dmp

Download
memory/4088-186-0x0000000000000000-mapping.dmp

Download
memory/4144-136-0x0000000000000000-mapping.dmp

Download
memory/4156-168-0x0000000000000000-mapping.dmp

Download
memory/4216-165-0x0000000000000000-mapping.dmp

Download
memory/4232-174-0x0000000000000000-mapping.dmp

Download
memory/4236-163-0x0000000000000000-mapping.dmp

Download
memory/4316-194-0x0000000000000000-mapping.dmp

Download
memory/4320-176-0x0000000000000000-mapping.dmp

Download
memory/4352-166-0x0000000000000000-mapping.dmp

Download
memory/4372-158-0x0000000000000000-mapping.dmp

Download
memory/4396-170-0x0000000000000000-mapping.dmp

Download
memory/4452-144-0x0000000000000000-mapping.dmp

Download
memory/4468-184-0x0000000000000000-mapping.dmp

Download
memory/4476-190-0x0000000000000000-mapping.dmp

Download
memory/4552-161-0x0000000000000000-mapping.dmp

Download
memory/4576-183-0x0000000000000000-mapping.dmp

Download
memory/4648-188-0x0000000000000000-mapping.dmp

Download
memory/4800-157-0x0000000000000000-mapping.dmp

Download
memory/4944-151-0x0000000000000000-mapping.dmp

Download
memory/4980-152-0x0000000000000000-mapping.dmp

Download
memory/5056-169-0x0000000000000000-mapping.dmp

Download
memory/5068-154-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads