f036c5732394289a67f5fd4ea0b4fb8ce526da8175bb5f36cccd903cc4010298

Analysis

max time kernel
97s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 06:48 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0cac6819cc477ebe1a59b63a605ba195.dll
Size

352KB
MD5

0cac6819cc477ebe1a59b63a605ba195
SHA1

19f92e6c6744397f5ecce7a5fbc20e4b8196beeb
SHA256

f036c5732394289a67f5fd4ea0b4fb8ce526da8175bb5f36cccd903cc4010298
SHA512

fd89f6fb01e5a8ebeda6a4d2ba5760a276755d4f4385b38f75f74a9ca809e92d4111d16d71243e0bf94b8dc294e1336233a3153579968e3adbaf7e212c5cabd7
SSDEEP

6144:pfxE/UFPJRmp9txQmwlEUzZ/H8GoaJoeGT+7wAAmT9PyfP+CQ+BQV5iptpTnXrk8:8sFPJRmntxDwrhot+Ct1tpTXnMm1H

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3980 wrote to memory of 4772	3980	rundll32.exe	54
PID 3980 wrote to memory of 4772	3980	rundll32.exe	54
PID 3980 wrote to memory of 4772	3980	rundll32.exe	54
PID 4772 wrote to memory of 4808	4772	rundll32.exe	91
PID 4772 wrote to memory of 4808	4772	rundll32.exe	91
PID 4772 wrote to memory of 4808	4772	rundll32.exe	91
PID 4808 wrote to memory of 2720	4808	rundll32.exe	92
PID 4808 wrote to memory of 2720	4808	rundll32.exe	92
PID 4808 wrote to memory of 2720	4808	rundll32.exe	92
PID 2720 wrote to memory of 1180	2720	rundll32.exe	93
PID 2720 wrote to memory of 1180	2720	rundll32.exe	93
PID 2720 wrote to memory of 1180	2720	rundll32.exe	93
PID 1180 wrote to memory of 1704	1180	rundll32.exe	94
PID 1180 wrote to memory of 1704	1180	rundll32.exe	94
PID 1180 wrote to memory of 1704	1180	rundll32.exe	94
PID 1704 wrote to memory of 3092	1704	rundll32.exe	95
PID 1704 wrote to memory of 3092	1704	rundll32.exe	95
PID 1704 wrote to memory of 3092	1704	rundll32.exe	95
PID 3092 wrote to memory of 4624	3092	rundll32.exe	96
PID 3092 wrote to memory of 4624	3092	rundll32.exe	96
PID 3092 wrote to memory of 4624	3092	rundll32.exe	96
PID 4624 wrote to memory of 216	4624	rundll32.exe	97
PID 4624 wrote to memory of 216	4624	rundll32.exe	97
PID 4624 wrote to memory of 216	4624	rundll32.exe	97
PID 216 wrote to memory of 1128	216	rundll32.exe	98
PID 216 wrote to memory of 1128	216	rundll32.exe	98
PID 216 wrote to memory of 1128	216	rundll32.exe	98
PID 1128 wrote to memory of 3588	1128	rundll32.exe	99
PID 1128 wrote to memory of 3588	1128	rundll32.exe	99
PID 1128 wrote to memory of 3588	1128	rundll32.exe	99
PID 3588 wrote to memory of 116	3588	rundll32.exe	101
PID 3588 wrote to memory of 116	3588	rundll32.exe	101
PID 3588 wrote to memory of 116	3588	rundll32.exe	101
PID 116 wrote to memory of 1732	116	rundll32.exe	102
PID 116 wrote to memory of 1732	116	rundll32.exe	102
PID 116 wrote to memory of 1732	116	rundll32.exe	102
PID 1732 wrote to memory of 3464	1732	rundll32.exe	103
PID 1732 wrote to memory of 3464	1732	rundll32.exe	103
PID 1732 wrote to memory of 3464	1732	rundll32.exe	103
PID 3464 wrote to memory of 3332	3464	rundll32.exe	104
PID 3464 wrote to memory of 3332	3464	rundll32.exe	104
PID 3464 wrote to memory of 3332	3464	rundll32.exe	104
PID 3332 wrote to memory of 3480	3332	rundll32.exe	105
PID 3332 wrote to memory of 3480	3332	rundll32.exe	105
PID 3332 wrote to memory of 3480	3332	rundll32.exe	105
PID 3480 wrote to memory of 2292	3480	rundll32.exe	106
PID 3480 wrote to memory of 2292	3480	rundll32.exe	106
PID 3480 wrote to memory of 2292	3480	rundll32.exe	106
PID 2292 wrote to memory of 2408	2292	rundll32.exe	107
PID 2292 wrote to memory of 2408	2292	rundll32.exe	107
PID 2292 wrote to memory of 2408	2292	rundll32.exe	107
PID 2408 wrote to memory of 784	2408	rundll32.exe	109
PID 2408 wrote to memory of 784	2408	rundll32.exe	109
PID 2408 wrote to memory of 784	2408	rundll32.exe	109
PID 784 wrote to memory of 1212	784	rundll32.exe	110
PID 784 wrote to memory of 1212	784	rundll32.exe	110
PID 784 wrote to memory of 1212	784	rundll32.exe	110
PID 1212 wrote to memory of 2816	1212	rundll32.exe	111
PID 1212 wrote to memory of 2816	1212	rundll32.exe	111
PID 1212 wrote to memory of 2816	1212	rundll32.exe	111
PID 2816 wrote to memory of 1964	2816	rundll32.exe	112
PID 2816 wrote to memory of 1964	2816	rundll32.exe	112
PID 2816 wrote to memory of 1964	2816	rundll32.exe	112
PID 1964 wrote to memory of 4060	1964	rundll32.exe	113

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3980
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4772
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4808
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2720
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1180
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:1704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:1128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:3332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:2408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:1212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:4664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:2884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:1444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:4248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:2236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:3220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:2624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:1604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:1868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:1648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:4732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:1244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:4028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:3172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:1468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:1224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:3796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        61⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        62⤵
        
        PID:2240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        63⤵
        
        PID:4440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        64⤵
        
        PID:516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        65⤵
        
        PID:2192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        66⤵
        
        PID:2088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        67⤵
        
        PID:3088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        68⤵
        
        PID:3060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        69⤵
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        70⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        71⤵
        
        PID:4988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        72⤵
        
        PID:2804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        73⤵
        
        PID:1764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        74⤵
        
        PID:3604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        75⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        76⤵
        
        PID:3136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        77⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        78⤵
        
        PID:4872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        79⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        80⤵
        
        PID:4672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        81⤵
        
        PID:3600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        82⤵
        
        PID:2768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        83⤵
        
        PID:2016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        84⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        85⤵
        
        PID:5052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:5132
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:5148
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:5164
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:5180
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:5196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:5628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:5648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:5784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:5896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        61⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        62⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        63⤵
        
        PID:6108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        64⤵
        
        PID:6124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        65⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        66⤵
        
        PID:6156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        67⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        68⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        69⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        70⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        71⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        72⤵
        
        PID:6244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        73⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        74⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        75⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        76⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        77⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        78⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        79⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        80⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        81⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        82⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        83⤵
        
        PID:6408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        84⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        85⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        86⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        87⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        88⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        89⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        90⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        91⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        92⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        93⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        94⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        95⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        96⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        97⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        98⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        99⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        100⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        101⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        102⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        103⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        104⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        105⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        106⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        107⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        108⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        109⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        110⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        111⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        112⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        113⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        114⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        115⤵
        
        PID:6888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        116⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        117⤵
        
        PID:6924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        118⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        119⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        120⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        121⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        122⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        123⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        124⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        125⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        126⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        127⤵
        
        PID:7072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        128⤵
        
        PID:7088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        129⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        130⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        131⤵
        
        PID:7136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        132⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        133⤵
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        134⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        135⤵
        
        PID:7196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        136⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        137⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        138⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        139⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        140⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        141⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        142⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        143⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        144⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        145⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        146⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        147⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        148⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        149⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        150⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        151⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        152⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        153⤵
        
        PID:7472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        154⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        155⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        156⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        157⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        158⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        159⤵
        
        PID:7568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        160⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        161⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        162⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        163⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        164⤵
        
        PID:7640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        165⤵
        
        PID:7656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        166⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        167⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        168⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        169⤵
        
        PID:7704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        170⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        171⤵
        
        PID:7732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        172⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        173⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        174⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        175⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        176⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        177⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        178⤵
        
        PID:7828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7840
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:7852
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7864
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:7876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7888
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:7904
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7928
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:7940
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7952
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:7968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7996
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8008
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8024
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8036
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8048
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:8104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8120
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8148
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8172
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3864
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:1600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3612
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:3660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:1504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:7224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:3132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8232
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8244
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8268
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8284
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8312
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8328
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8344
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8360
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8388
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8404
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8436
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8452
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8468
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:8496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:8564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8576
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8656
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8672
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8688
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8700
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8716
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:8728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8764
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8804
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8832
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8856
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8872
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8884
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:8896
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:8908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8920
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:8972
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:8992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9016
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9040
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9088
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9100
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9136
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9164
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9204
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:7976
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9228
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:9244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9284
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9296
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9308
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:9320
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:9352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:8948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9380
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9408
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9420
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9436
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9480
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9504
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9520
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9556
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9568
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9592
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:9616
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:9628
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:9640
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:9652
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:9664
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:9876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:10024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:10036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:10280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:10296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:10312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:10416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:10432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:10488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10524
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:10536
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:10552
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:10564
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:10584
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:10616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:10664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:10692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:10748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:10824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:10856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10868
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:10884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:10896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:10908
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:10920
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:10932
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:10944
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:10992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:11004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:11016
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:11032
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:11044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:11068
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:11080
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:11096
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:11108
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:11120
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:11176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:11204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:11220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:11248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:11776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:11804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:11820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        61⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        62⤵
        
        PID:12024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        63⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        64⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        65⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        66⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        67⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        68⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        69⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        70⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        71⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        72⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        73⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        74⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        75⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        76⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        77⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        78⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        79⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        80⤵
        
        PID:1636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        81⤵
        
        PID:2888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        82⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        83⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        84⤵
        
        PID:3836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        85⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        86⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        87⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        88⤵
        
        PID:12352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        89⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        90⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        91⤵
        
        PID:12400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        92⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        93⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        94⤵
        
        PID:12444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        95⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        96⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        97⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        98⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        99⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        100⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        101⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        102⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        103⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        104⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        105⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        106⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        107⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        108⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        109⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        110⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        111⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        112⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        113⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        114⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        115⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        116⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        117⤵
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        118⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        119⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        120⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        121⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        122⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        123⤵
        
        PID:12912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        124⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        125⤵
        
        PID:12944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        126⤵
        
        PID:12956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        127⤵
        
        PID:12972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        128⤵
        
        PID:12988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        129⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        130⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        131⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        132⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        133⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        134⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        135⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        136⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        137⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        138⤵
        
        PID:13152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        139⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        140⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        141⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        142⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        143⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        144⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        145⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        146⤵
        
        PID:13276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        147⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        148⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        149⤵
        
        PID:12532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        150⤵
        
        PID:11280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        151⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        152⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        153⤵
        
        PID:13344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        154⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        155⤵
        
        PID:13376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        156⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        157⤵
        
        PID:13408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        158⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        159⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        160⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        161⤵
        
        PID:13468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        162⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        163⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        164⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        165⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        166⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        167⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        168⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        169⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        170⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        171⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        172⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        173⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        174⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        175⤵
        
        PID:13684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        176⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        177⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        178⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        179⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        180⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        181⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        182⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        183⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        184⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        185⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        186⤵
        
        PID:13856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        187⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        188⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        189⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        190⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        191⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        192⤵
        
        PID:13952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        193⤵
        
        PID:13968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        194⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        195⤵
        
        PID:14000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        196⤵
        
        PID:14016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        197⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        198⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        199⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        200⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        201⤵
        
        PID:14092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        202⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        203⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        204⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        205⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        206⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        207⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        208⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        209⤵
        
        PID:14216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        210⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        211⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        212⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        213⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        214⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        215⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        216⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        217⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        218⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        219⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        220⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        221⤵
        
        PID:14388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        222⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        223⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        224⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        225⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        226⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        227⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        228⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        229⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        230⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        231⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        232⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        233⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        234⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        235⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        236⤵
        
        PID:14612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        237⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        238⤵
        
        PID:14644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        239⤵
        
        PID:14660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        240⤵
        
        PID:14676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        241⤵
        
        PID:14692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        242⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        243⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        244⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        245⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        246⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        247⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        248⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        249⤵
        
        PID:14816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        250⤵
        
        PID:14832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        251⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        252⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        253⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        254⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        255⤵
        
        PID:14912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        256⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        257⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        258⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        259⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        260⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        261⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        262⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        263⤵
        
        PID:15028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        264⤵
        
        PID:15044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        265⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        266⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        267⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        268⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        269⤵
        
        PID:15120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        270⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        271⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        272⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        273⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        274⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        275⤵
        
        PID:15204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        276⤵
        
        PID:15216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        277⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        278⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        279⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        280⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        281⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        282⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        283⤵
        
        PID:15324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        284⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        285⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        286⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        287⤵
        
        PID:15384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        288⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        289⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        290⤵
        
        PID:15436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        291⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        292⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        293⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        294⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        295⤵
        
        PID:15504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        296⤵
        
        PID:15520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        297⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        298⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        299⤵
        
        PID:15564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:11056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:15580
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:15596
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:15612
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:15628
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:15640
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:15696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:15740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:15792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:15836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:15848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:15860
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:15876
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:15892
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:15908
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:15940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
1⤵
PID:15952
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
  2⤵
  PID:15964
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
    3⤵
    PID:15980
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
      4⤵
      PID:15992
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        5⤵
        
        PID:16012
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        6⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        7⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        8⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        9⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        10⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        11⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        12⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        13⤵
        
        PID:16140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        14⤵
        
        PID:16156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        15⤵
        
        PID:16172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        16⤵
        
        PID:16188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        17⤵
        
        PID:16204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        18⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        19⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        20⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        21⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        22⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        23⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        24⤵
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        25⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        26⤵
        
        PID:16344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        27⤵
        
        PID:16360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        28⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        29⤵
        
        PID:15724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        30⤵
        
        PID:2716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        31⤵
        
        PID:2868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        32⤵
        
        PID:3040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        33⤵
        
        PID:2688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        34⤵
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        35⤵
        
        PID:16392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        36⤵
        
        PID:16408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        37⤵
        
        PID:16420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        38⤵
        
        PID:16436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        39⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        40⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        41⤵
        
        PID:16480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        42⤵
        
        PID:16500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        43⤵
        
        PID:16512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        44⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        45⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        46⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        47⤵
        
        PID:16568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        48⤵
        
        PID:16580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        49⤵
        
        PID:16592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        50⤵
        
        PID:16608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        51⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        52⤵
        
        PID:16632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        53⤵
        
        PID:16648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        54⤵
        
        PID:16664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        55⤵
        
        PID:16680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        56⤵
        
        PID:16696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        57⤵
        
        PID:16712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        58⤵
        
        PID:16728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        59⤵
        
        PID:16744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\0cac6819cc477ebe1a59b63a605ba195.dll,#1
        60⤵
        
        PID:16764

Network

DNS

4.181.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

4.181.190.20.in-addr.arpa

IN PTR

Response
DNS

173.178.17.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

173.178.17.96.in-addr.arpa

IN PTR

Response

173.178.17.96.in-addr.arpa

IN PTR

a96-17-178-173deploystaticakamaitechnologiescom
DNS

g.bing.com

Remote address:

8.8.8.8:53

Request

g.bing.com

IN A

Response

g.bing.com

IN CNAME

g-bing-com.a-0001.a-msedge.net

g-bing-com.a-0001.a-msedge.net

IN CNAME

dual-a-0001.a-msedge.net

dual-a-0001.a-msedge.net

IN A

204.79.197.200

dual-a-0001.a-msedge.net

IN A

13.107.21.200
GET

https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

Remote address:

204.79.197.200:443

Request

GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3751EB07F4C46F1B1F02F8F3F57F6EE0; domain=.bing.com; expires=Mon, 20-Jan-2025 10:34:26 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C857FA59195148339DF27151E50ABC40 Ref B: LON04EDGE0819 Ref C: 2023-12-27T10:34:26Z
date: Wed, 27 Dec 2023 10:34:26 GMT
GET

https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

Remote address:

204.79.197.200:443

Request

GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=3751EB07F4C46F1B1F02F8F3F57F6EE0

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MSPTC=rQBgNd-oWbP4fUG3NzXo28-VmhZtnMLS_zEYx6MKoV4; domain=.bing.com; expires=Mon, 20-Jan-2025 10:34:26 GMT; path=/; Partitioned; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B3D917A23A124082A7B420A1011F01C7 Ref B: LON04EDGE0819 Ref C: 2023-12-27T10:34:26Z
date: Wed, 27 Dec 2023 10:34:26 GMT
GET

https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

Remote address:

204.79.197.200:443

Request

GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=3751EB07F4C46F1B1F02F8F3F57F6EE0; MSPTC=rQBgNd-oWbP4fUG3NzXo28-VmhZtnMLS_zEYx6MKoV4

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7354D7C4F9D54EA388EB3E0E5422A9CE Ref B: LON04EDGE0819 Ref C: 2023-12-27T10:34:26Z
date: Wed, 27 Dec 2023 10:34:26 GMT
DNS

200.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.197.79.204.in-addr.arpa

IN PTR

Response

200.197.79.204.in-addr.arpa

IN PTR

a-0001a-msedgenet
DNS

9.228.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.228.82.20.in-addr.arpa

IN PTR

Response
DNS

9.228.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.228.82.20.in-addr.arpa

IN PTR
DNS

9.228.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.228.82.20.in-addr.arpa

IN PTR
DNS

55.36.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

55.36.223.20.in-addr.arpa

IN PTR

Response
DNS

41.110.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

41.110.16.96.in-addr.arpa

IN PTR

Response

41.110.16.96.in-addr.arpa

IN PTR

a96-16-110-41deploystaticakamaitechnologiescom
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR
DNS

183.59.114.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

183.59.114.20.in-addr.arpa

IN PTR

Response
DNS

206.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.85.13.in-addr.arpa

IN PTR

Response
DNS

0.204.248.87.in-addr.arpa

Remote address:

8.8.8.8:53

Request

0.204.248.87.in-addr.arpa

IN PTR

Response

0.204.248.87.in-addr.arpa

IN PTR

https-87-248-204-0lhrllnwnet
DNS

18.134.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.134.221.88.in-addr.arpa

IN PTR

Response

18.134.221.88.in-addr.arpa

IN PTR

a88-221-134-18deploystaticakamaitechnologiescom
DNS

18.134.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.134.221.88.in-addr.arpa

IN PTR
DNS

19.229.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

19.229.111.52.in-addr.arpa

IN PTR

Response
DNS

194.178.17.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.178.17.96.in-addr.arpa

IN PTR

Response

194.178.17.96.in-addr.arpa

IN PTR

a96-17-178-194deploystaticakamaitechnologiescom

204.79.197.200:443

https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

tls, http2

3.0kB
10.7kB
24
18

HTTP Request

GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

HTTP Response

204

HTTP Request

GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

HTTP Response

204

HTTP Request

GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8ee06e6e39234f0fbe13aa8ee64564d2&localId=w:8DF2633F-10BE-C247-8B12-9A64CE5AE8FE&deviceId=6896190589629886&anid=

HTTP Response

204
138.91.171.81:80

46 B
1

8.8.8.8:53

4.181.190.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

4.181.190.20.in-addr.arpa
8.8.8.8:53

173.178.17.96.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

173.178.17.96.in-addr.arpa
8.8.8.8:53

g.bing.com

dns

56 B
158 B
1
1

DNS Request

g.bing.com

DNS Response

204.79.197.200

13.107.21.200
8.8.8.8:53

200.197.79.204.in-addr.arpa

dns

73 B
106 B
1
1

DNS Request

200.197.79.204.in-addr.arpa
8.8.8.8:53

9.228.82.20.in-addr.arpa

dns

210 B
156 B
3
1

DNS Request

9.228.82.20.in-addr.arpa

DNS Request

9.228.82.20.in-addr.arpa

DNS Request

9.228.82.20.in-addr.arpa
8.8.8.8:53

55.36.223.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

55.36.223.20.in-addr.arpa
8.8.8.8:53

41.110.16.96.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

41.110.16.96.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

146 B
144 B
2
1

DNS Request

95.221.229.192.in-addr.arpa

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

183.59.114.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

183.59.114.20.in-addr.arpa
8.8.8.8:53

206.23.85.13.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

206.23.85.13.in-addr.arpa
8.8.8.8:53

0.204.248.87.in-addr.arpa

dns

71 B
116 B
1
1

DNS Request

0.204.248.87.in-addr.arpa
8.8.8.8:53

18.134.221.88.in-addr.arpa

dns

144 B
137 B
2
1

DNS Request

18.134.221.88.in-addr.arpa

DNS Request

18.134.221.88.in-addr.arpa
8.8.8.8:53

19.229.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

19.229.111.52.in-addr.arpa
8.8.8.8:53

194.178.17.96.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

194.178.17.96.in-addr.arpa

Windows 7 deprecation

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.