f036c5732394289a67f5fd4ea0b4fb8ce526da8175bb5f36cccd903cc4010298

Analysis

max time kernel
97s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 06:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0cac6819cc477ebe1a59b63a605ba195.dll
Size

352KB
MD5

0cac6819cc477ebe1a59b63a605ba195
SHA1

19f92e6c6744397f5ecce7a5fbc20e4b8196beeb
SHA256

f036c5732394289a67f5fd4ea0b4fb8ce526da8175bb5f36cccd903cc4010298
SHA512

fd89f6fb01e5a8ebeda6a4d2ba5760a276755d4f4385b38f75f74a9ca809e92d4111d16d71243e0bf94b8dc294e1336233a3153579968e3adbaf7e212c5cabd7
SSDEEP

6144:pfxE/UFPJRmp9txQmwlEUzZ/H8GoaJoeGT+7wAAmT9PyfP+CQ+BQV5iptpTnXrk8:8sFPJRmntxDwrhot+Ct1tpTXnMm1H

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3980 wrote to memory of 4772	3980	rundll32.exe	54
PID 3980 wrote to memory of 4772	3980	rundll32.exe	54
PID 3980 wrote to memory of 4772	3980	rundll32.exe	54
PID 4772 wrote to memory of 4808	4772	rundll32.exe	91
PID 4772 wrote to memory of 4808	4772	rundll32.exe	91
PID 4772 wrote to memory of 4808	4772	rundll32.exe	91
PID 4808 wrote to memory of 2720	4808	rundll32.exe	92
PID 4808 wrote to memory of 2720	4808	rundll32.exe	92
PID 4808 wrote to memory of 2720	4808	rundll32.exe	92
PID 2720 wrote to memory of 1180	2720	rundll32.exe	93
PID 2720 wrote to memory of 1180	2720	rundll32.exe	93
PID 2720 wrote to memory of 1180	2720	rundll32.exe	93
PID 1180 wrote to memory of 1704	1180	rundll32.exe	94
PID 1180 wrote to memory of 1704	1180	rundll32.exe	94
PID 1180 wrote to memory of 1704	1180	rundll32.exe	94
PID 1704 wrote to memory of 3092	1704	rundll32.exe	95
PID 1704 wrote to memory of 3092	1704	rundll32.exe	95
PID 1704 wrote to memory of 3092	1704	rundll32.exe	95
PID 3092 wrote to memory of 4624	3092	rundll32.exe	96
PID 3092 wrote to memory of 4624	3092	rundll32.exe	96
PID 3092 wrote to memory of 4624	3092	rundll32.exe	96
PID 4624 wrote to memory of 216	4624	rundll32.exe	97
PID 4624 wrote to memory of 216	4624	rundll32.exe	97
PID 4624 wrote to memory of 216	4624	rundll32.exe	97
PID 216 wrote to memory of 1128	216	rundll32.exe	98
PID 216 wrote to memory of 1128	216	rundll32.exe	98
PID 216 wrote to memory of 1128	216	rundll32.exe	98
PID 1128 wrote to memory of 3588	1128	rundll32.exe	99
PID 1128 wrote to memory of 3588	1128	rundll32.exe	99
PID 1128 wrote to memory of 3588	1128	rundll32.exe	99
PID 3588 wrote to memory of 116	3588	rundll32.exe	101
PID 3588 wrote to memory of 116	3588	rundll32.exe	101
PID 3588 wrote to memory of 116	3588	rundll32.exe	101
PID 116 wrote to memory of 1732	116	rundll32.exe	102
PID 116 wrote to memory of 1732	116	rundll32.exe	102
PID 116 wrote to memory of 1732	116	rundll32.exe	102
PID 1732 wrote to memory of 3464	1732	rundll32.exe	103
PID 1732 wrote to memory of 3464	1732	rundll32.exe	103
PID 1732 wrote to memory of 3464	1732	rundll32.exe	103
PID 3464 wrote to memory of 3332	3464	rundll32.exe	104
PID 3464 wrote to memory of 3332	3464	rundll32.exe	104
PID 3464 wrote to memory of 3332	3464	rundll32.exe	104
PID 3332 wrote to memory of 3480	3332	rundll32.exe	105
PID 3332 wrote to memory of 3480	3332	rundll32.exe	105
PID 3332 wrote to memory of 3480	3332	rundll32.exe	105
PID 3480 wrote to memory of 2292	3480	rundll32.exe	106
PID 3480 wrote to memory of 2292	3480	rundll32.exe	106
PID 3480 wrote to memory of 2292	3480	rundll32.exe	106
PID 2292 wrote to memory of 2408	2292	rundll32.exe	107
PID 2292 wrote to memory of 2408	2292	rundll32.exe	107
PID 2292 wrote to memory of 2408	2292	rundll32.exe	107
PID 2408 wrote to memory of 784	2408	rundll32.exe	109
PID 2408 wrote to memory of 784	2408	rundll32.exe	109
PID 2408 wrote to memory of 784	2408	rundll32.exe	109
PID 784 wrote to memory of 1212	784	rundll32.exe	110
PID 784 wrote to memory of 1212	784	rundll32.exe	110
PID 784 wrote to memory of 1212	784	rundll32.exe	110
PID 1212 wrote to memory of 2816	1212	rundll32.exe	111
PID 1212 wrote to memory of 2816	1212	rundll32.exe	111
PID 1212 wrote to memory of 2816	1212	rundll32.exe	111
PID 2816 wrote to memory of 1964	2816	rundll32.exe	112
PID 2816 wrote to memory of 1964	2816	rundll32.exe	112
PID 2816 wrote to memory of 1964	2816	rundll32.exe	112
PID 1964 wrote to memory of 4060	1964	rundll32.exe	113

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3980
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4772
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4808
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2720
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1180
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:1704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:1128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:3332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:2408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:1212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:4664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:2884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:1444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:4248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:2236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:3220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:2624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:1604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:1868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:1648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:4732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:1244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:4028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:3172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:1468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:1224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:3796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        61⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        62⤵
        
        PID:2240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        63⤵
        
        PID:4440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        64⤵
        
        PID:516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        65⤵
        
        PID:2192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        66⤵
        
        PID:2088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        67⤵
        
        PID:3088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        68⤵
        
        PID:3060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        69⤵
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        70⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        71⤵
        
        PID:4988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        72⤵
        
        PID:2804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        73⤵
        
        PID:1764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        74⤵
        
        PID:3604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        75⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        76⤵
        
        PID:3136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        77⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        78⤵
        
        PID:4872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        79⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        80⤵
        
        PID:4672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        81⤵
        
        PID:3600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        82⤵
        
        PID:2768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        83⤵
        
        PID:2016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        84⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        85⤵
        
        PID:5052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:5132
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:5148
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:5164
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:5180
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:5196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:5628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:5648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:5784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:5896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        61⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        62⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        63⤵
        
        PID:6108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        64⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        65⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        66⤵
        
        PID:6156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        67⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        68⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        69⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        70⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        71⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        72⤵
        
        PID:6244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        73⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        74⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        75⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        76⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        77⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        78⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        79⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        80⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        81⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        82⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        83⤵
        
        PID:6408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        84⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        85⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        86⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        87⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        88⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        89⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        90⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        91⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        92⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        93⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        94⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        95⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        96⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        97⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        98⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        99⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        100⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        101⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        102⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        103⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        104⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        105⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        106⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        107⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        108⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        109⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        110⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        111⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        112⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        113⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        114⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        115⤵
        
        PID:6888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        116⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        117⤵
        
        PID:6924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        118⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        119⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        120⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        121⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        122⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        123⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        124⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        125⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        126⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        127⤵
        
        PID:7072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        128⤵
        
        PID:7088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        129⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        130⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        131⤵
        
        PID:7136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        132⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        133⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        134⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        135⤵
        
        PID:7196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        136⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        137⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        138⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        139⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        140⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        141⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        142⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        143⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        144⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        145⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        146⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        147⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        148⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        149⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        150⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        151⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        152⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        153⤵
        
        PID:7472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        154⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        155⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        156⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        157⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        158⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        159⤵
        
        PID:7568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        160⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        161⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        162⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        163⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        164⤵
        
        PID:7640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        165⤵
        
        PID:7656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        166⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        167⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        168⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        169⤵
        
        PID:7704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        170⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        171⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        172⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        173⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        174⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        175⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        176⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        177⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        178⤵
        
        PID:7828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7840
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:7852
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7864
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:7876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7888
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:7904
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7928
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:7940
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7952
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:7968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7996
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8008
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8024
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8036
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8048
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:8104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8120
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8148
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8172
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3864
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:1600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3612
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:3660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:1504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8232
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8244
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8268
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8284
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8312
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8328
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8344
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8360
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8388
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8404
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8436
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8452
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8468
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:8564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8576
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8656
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8672
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8688
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8700
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8716
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:8728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8764
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8804
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8832
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8856
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8872
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8884
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8896
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8920
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8972
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9016
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9040
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9088
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9100
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9136
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9164
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9204
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7976
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9228
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:9244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9284
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9296
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9308
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:9320
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:9352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9380
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9408
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9420
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9436
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9480
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9504
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9520
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9556
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9568
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9592
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9616
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9628
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9640
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9652
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:9664
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:9876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:10024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:10036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:10280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:10296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:10312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:10416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:10432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:10488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10524
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:10536
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:10552
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:10564
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:10584
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:10616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:10664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:10692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:10748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:10824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:10856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10868
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:10884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:10908
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:10920
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:10932
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:10944
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:10992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:11004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:11016
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:11032
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:11044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:11068
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:11080
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:11096
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:11108
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:11120
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:11176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:11204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:11220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:11776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:11804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:11820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        61⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        62⤵
        
        PID:12024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        63⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        64⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        65⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        66⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        67⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        68⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        69⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        70⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        71⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        72⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        73⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        74⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        75⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        76⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        77⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        78⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        79⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        80⤵
        
        PID:1636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        81⤵
        
        PID:2888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        82⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        83⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        84⤵
        
        PID:3836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        85⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        86⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        87⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        88⤵
        
        PID:12352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        89⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        90⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        91⤵
        
        PID:12400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        92⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        93⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        94⤵
        
        PID:12444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        95⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        96⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        97⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        98⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        99⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        100⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        101⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        102⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        103⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        104⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        105⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        106⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        107⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        108⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        109⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        110⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        111⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        112⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        113⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        114⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        115⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        116⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        117⤵
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        118⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        119⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        120⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        121⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        122⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        123⤵
        
        PID:12912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        124⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        125⤵
        
        PID:12944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        126⤵
        
        PID:12956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        127⤵
        
        PID:12972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        128⤵
        
        PID:12988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        129⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        130⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        131⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        132⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        133⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        134⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        135⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        136⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        137⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        138⤵
        
        PID:13152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        139⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        140⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        141⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        142⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        143⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        144⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        145⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        146⤵
        
        PID:13276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        147⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        148⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        149⤵
        
        PID:12532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        150⤵
        
        PID:11280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        151⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        152⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        153⤵
        
        PID:13344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        154⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        155⤵
        
        PID:13376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        156⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        157⤵
        
        PID:13408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        158⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        159⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        160⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        161⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        162⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        163⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        164⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        165⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        166⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        167⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        168⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        169⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        170⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        171⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        172⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        173⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        174⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        175⤵
        
        PID:13684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        176⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        177⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        178⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        179⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        180⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        181⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        182⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        183⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        184⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        185⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        186⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        187⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        188⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        189⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        190⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        191⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        192⤵
        
        PID:13952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        193⤵
        
        PID:13968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        194⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        195⤵
        
        PID:14000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        196⤵
        
        PID:14016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        197⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        198⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        199⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        200⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        201⤵
        
        PID:14092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        202⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        203⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        204⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        205⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        206⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        207⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        208⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        209⤵
        
        PID:14216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        210⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        211⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        212⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        213⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        214⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        215⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        216⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        217⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        218⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        219⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        220⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        221⤵
        
        PID:14388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        222⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        223⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        224⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        225⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        226⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        227⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        228⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        229⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        230⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        231⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        232⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        233⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        234⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        235⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        236⤵
        
        PID:14612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        237⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        238⤵
        
        PID:14644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        239⤵
        
        PID:14660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        240⤵
        
        PID:14676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        241⤵
        
        PID:14692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        242⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        243⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        244⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        245⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        246⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        247⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        248⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        249⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        250⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        251⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        252⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        253⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        254⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        255⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        256⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        257⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        258⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        259⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        260⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        261⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        262⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        263⤵
        
        PID:15028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        264⤵
        
        PID:15044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        265⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        266⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        267⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        268⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        269⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        270⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        271⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        272⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        273⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        274⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        275⤵
        
        PID:15204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        276⤵
        
        PID:15216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        277⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        278⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        279⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        280⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        281⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        282⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        283⤵
        
        PID:15324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        284⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        285⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        286⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        287⤵
        
        PID:15384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        288⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        289⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        290⤵
        
        PID:15436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        291⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        292⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        293⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        294⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        295⤵
        
        PID:15504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        296⤵
        
        PID:15520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        297⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        298⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        299⤵
        
        PID:15564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:11056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:15580
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:15596
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:15612
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:15628
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:15640
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:15696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:15740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:15792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:15836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:15848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:15860
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:15876
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:15892
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:15908
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:15940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:15952
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:15964
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:15980
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:15992
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:16012
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:16140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:16156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:16172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:16188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:16204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:15724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:2716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:2868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:3040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:2688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:16420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:16436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:16480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:16500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:16592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:16608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:16632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:16648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:16664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:16680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:16696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:16712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:16728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:16744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:16764

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads