dd82c32dede2eb41632d41f9c6dde99c55d3c48a618d365e1cd02f780f8744a5

Analysis

max time kernel
172s
max time network
185s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 12:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6e4a2a1face9f6cd610feee04e0fec28.dll
Size

155KB
MD5

6e4a2a1face9f6cd610feee04e0fec28
SHA1

3fb36dcd8bb73d0e95bc2fe0c5c7d597fc951c26
SHA256

dd82c32dede2eb41632d41f9c6dde99c55d3c48a618d365e1cd02f780f8744a5
SHA512

21de25b336fd4cb5f586ccf257dc12d8da6bc1c93c2a603ca14e6113822c3e990f187454dea1919f961ebdf01d52f94e52bf4ef900a4de6dc0ca0997c6254611
SSDEEP

3072:t6k0m0NDEIFXrQf4Pu8zazRLTrftm4VhDylTejWVcz7uMFgVGsn:t10TR81LtmsSijJ7BFgVGsn

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4532 wrote to memory of 4664	4532	rundll32.exe	88
PID 4532 wrote to memory of 4664	4532	rundll32.exe	88
PID 4532 wrote to memory of 4664	4532	rundll32.exe	88
PID 4664 wrote to memory of 1116	4664	rundll32.exe	89
PID 4664 wrote to memory of 1116	4664	rundll32.exe	89
PID 4664 wrote to memory of 1116	4664	rundll32.exe	89
PID 1116 wrote to memory of 2168	1116	rundll32.exe	330
PID 1116 wrote to memory of 2168	1116	rundll32.exe	330
PID 1116 wrote to memory of 2168	1116	rundll32.exe	330
PID 2168 wrote to memory of 2540	2168	rundll32.exe	90
PID 2168 wrote to memory of 2540	2168	rundll32.exe	90
PID 2168 wrote to memory of 2540	2168	rundll32.exe	90
PID 2540 wrote to memory of 384	2540	rundll32.exe	91
PID 2540 wrote to memory of 384	2540	rundll32.exe	91
PID 2540 wrote to memory of 384	2540	rundll32.exe	91
PID 384 wrote to memory of 2096	384	rundll32.exe	93
PID 384 wrote to memory of 2096	384	rundll32.exe	93
PID 384 wrote to memory of 2096	384	rundll32.exe	93
PID 2096 wrote to memory of 3952	2096	rundll32.exe	92
PID 2096 wrote to memory of 3952	2096	rundll32.exe	92
PID 2096 wrote to memory of 3952	2096	rundll32.exe	92
PID 3952 wrote to memory of 4840	3952	rundll32.exe	329
PID 3952 wrote to memory of 4840	3952	rundll32.exe	329
PID 3952 wrote to memory of 4840	3952	rundll32.exe	329
PID 4840 wrote to memory of 2072	4840	rundll32.exe	94
PID 4840 wrote to memory of 2072	4840	rundll32.exe	94
PID 4840 wrote to memory of 2072	4840	rundll32.exe	94
PID 2072 wrote to memory of 4400	2072	rundll32.exe	95
PID 2072 wrote to memory of 4400	2072	rundll32.exe	95
PID 2072 wrote to memory of 4400	2072	rundll32.exe	95
PID 4400 wrote to memory of 540	4400	rundll32.exe	328
PID 4400 wrote to memory of 540	4400	rundll32.exe	328
PID 4400 wrote to memory of 540	4400	rundll32.exe	328
PID 540 wrote to memory of 4100	540	rundll32.exe	96
PID 540 wrote to memory of 4100	540	rundll32.exe	96
PID 540 wrote to memory of 4100	540	rundll32.exe	96
PID 4100 wrote to memory of 644	4100	rundll32.exe	97
PID 4100 wrote to memory of 644	4100	rundll32.exe	97
PID 4100 wrote to memory of 644	4100	rundll32.exe	97
PID 644 wrote to memory of 3236	644	rundll32.exe	327
PID 644 wrote to memory of 3236	644	rundll32.exe	327
PID 644 wrote to memory of 3236	644	rundll32.exe	327
PID 3236 wrote to memory of 3968	3236	rundll32.exe	98
PID 3236 wrote to memory of 3968	3236	rundll32.exe	98
PID 3236 wrote to memory of 3968	3236	rundll32.exe	98
PID 3968 wrote to memory of 1516	3968	rundll32.exe	99
PID 3968 wrote to memory of 1516	3968	rundll32.exe	99
PID 3968 wrote to memory of 1516	3968	rundll32.exe	99
PID 1516 wrote to memory of 4680	1516	rundll32.exe	326
PID 1516 wrote to memory of 4680	1516	rundll32.exe	326
PID 1516 wrote to memory of 4680	1516	rundll32.exe	326
PID 4680 wrote to memory of 2308	4680	rundll32.exe	100
PID 4680 wrote to memory of 2308	4680	rundll32.exe	100
PID 4680 wrote to memory of 2308	4680	rundll32.exe	100
PID 2308 wrote to memory of 2696	2308	rundll32.exe	325
PID 2308 wrote to memory of 2696	2308	rundll32.exe	325
PID 2308 wrote to memory of 2696	2308	rundll32.exe	325
PID 2696 wrote to memory of 4568	2696	rundll32.exe	101
PID 2696 wrote to memory of 4568	2696	rundll32.exe	101
PID 2696 wrote to memory of 4568	2696	rundll32.exe	101
PID 4568 wrote to memory of 864	4568	rundll32.exe	102
PID 4568 wrote to memory of 864	4568	rundll32.exe	102
PID 4568 wrote to memory of 864	4568	rundll32.exe	102
PID 864 wrote to memory of 4712	864	rundll32.exe	324

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4532
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4664
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1116
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2540
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:384
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3952
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2072
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4400
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4100
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:644
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3968
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1516
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2308
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4568
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:864
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:4712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:2704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:3800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:860
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:4056
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:1004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:1780
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:4220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:3084
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:1956
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:2404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5008
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:2448
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:1904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:1428
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:3292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:3628
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:1724
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:3452
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:4216
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:4812
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:3900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:3740
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:2876
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:3156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:4572
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:208
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:2364
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:3240
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:4136
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:5044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:4328
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:3548
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:4104
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:3096
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:3640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:412
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:1532
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:1736
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:4916
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:3460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:1392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:1520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:1988
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:2568
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:4504
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:732
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:1232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:4784
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:4320
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:1032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:2092
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:1840
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:4300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:1236
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:1424
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:3400
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:4976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:4380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5152
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5164
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5192
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5204
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5220
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:5232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5260
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5296
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5308
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5360
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5396
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5412
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5440
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5456
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5488
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5516
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5532
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5564
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5612
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5644
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5664
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5692
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5724
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5740
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5764
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5780
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5792
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:5812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5828
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5848
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5864
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:5876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5892
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5908
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:5932
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:5948
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:5960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5972
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6000
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6060
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6076
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6100
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:6120
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:6136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:2520
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6148
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6176
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6192
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6260
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6288
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6300
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6332
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6396
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6424
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6440
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6468
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6480
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6512
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6540
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6572
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6648
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6664
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:6680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6696
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6708
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6728
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:6744
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:6772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6828
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6856
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6888
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6900
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:6956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:6972
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:6988
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:7004
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:7020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7032
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7052
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:7068
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:7084
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:7096
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:7128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:7144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:7156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:4676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:4904
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7228
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7264
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7280
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:7296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7320
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7332
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:7348
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:7364
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:7388
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:7400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:7440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7456
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7472
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:7484
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:7500
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:7524
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:7556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7568
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7600
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:7648
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:7680
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:7700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7716
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7760
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:7852
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:7868
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:7884
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:7896
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:7920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:7932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:7948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:7964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:7988
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8008
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8024
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8036
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8052
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:8108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:8124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8140
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8156
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8168
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:5348
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:4828
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:1732
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:4148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:1772
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:5020
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:3792
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:5900
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:4728
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:2936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8272
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8292
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8308
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8336
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8356
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8372
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8388
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8404
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:8416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8432
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8448
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8460
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8476
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8492
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:8552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8568
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8580
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8596
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8608
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8644
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8656
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8672
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8716
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8728
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8744
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8776
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8792
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8804
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8820
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8836
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:8852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:8864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:8880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8912
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:8928
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:8940
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:8952
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:8968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:8984
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8996
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9024
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9036
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9052
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:9064
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:9080
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:9092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:9176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:9192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:8752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9228
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9268
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9300
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9316
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9328
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:9344
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:9360
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:9388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9404
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9420
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9440
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:9456
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:9476
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:9492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9508
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9556
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9584
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9600
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9648
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9664
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:9688
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:9712
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:9728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:9768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9784
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9812
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9880
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9896
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9928
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:9944
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:9960
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:9976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:9988
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10024
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10036
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10052
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:10068
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:10084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10096
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10112
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10128
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:10144
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:10156
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:10172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:10204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:10220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:10256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        13⤵
        
        PID:10272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        14⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        15⤵
        
        PID:10300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10312
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10344
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10360
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10388
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10408
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10428
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:10444
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:10460
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:10476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:10504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10520
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10552
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10568
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10584
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:10596
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:10612
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:10672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10688
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10720
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10736
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10752
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:10764
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:10776
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:10824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10840
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10856
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:10888
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:10908
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:10924
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:10936
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:10952
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:10988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11020
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11036
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11068
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11084
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11100
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11128
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11144
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11160
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11172
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:11188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11204
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11220
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11236
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11248
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:11260
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:11288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11300
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11316
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11332
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11364
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11380
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11396
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11428
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11444
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11460
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11476
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:11488
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:11536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:11564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:11592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        13⤵
        
        PID:11636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11652
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11668
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11684
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11700
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:11716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11728
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11760
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11796
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11808
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11824
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11856
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:11872
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:11884
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:11900
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:11916
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:11948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:11960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:11976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11992
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12008
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12020
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12032
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:12048
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:12080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12100
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12120
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12172
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12220
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12248
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12268
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:11508
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12296
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12312
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12356
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12368
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12384
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:12400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12412
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12428
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12460
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12476
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12508
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12524
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12540
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12556
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:12572
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:12604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:12664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:12680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        13⤵
        
        PID:12700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        14⤵
        
        PID:12716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12748
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12764
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12792
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12808
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12824
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12840
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:12856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12872
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12900
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12920
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:12932
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:12948
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:12964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13020
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13036
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13052
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:13064
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:13080
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:13096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:12980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13108
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13124
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13140
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:13156
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:13172
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:13188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:13228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:13240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13256
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13284
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:2368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:12692
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13328
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:13344
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:13360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13376
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13392
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13428
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13444
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13460
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:13476
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:13492
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:13508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:13536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13552
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13568
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13612
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13628
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:13644
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:13660
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        13⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        14⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        15⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        16⤵
        
        PID:13828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13844
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13860
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13876
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:13892
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:13908
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:13920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:13952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:13964
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:13980
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:13996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:14012
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:14028
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:14040
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:14052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:14068
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:14084
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:14100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:14116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:14132
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:14148
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:14160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:14176
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:14192
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:14208
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:14220
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:14232
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:14280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:2120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        13⤵
        
        PID:14344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        14⤵
        
        PID:14360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
1⤵
PID:14376
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
  2⤵
  PID:14392
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
    3⤵
    PID:14408
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
      4⤵
      PID:14420
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        5⤵
        
        PID:14436
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        6⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        7⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        8⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        9⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        10⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        11⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        12⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        13⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        14⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        15⤵
        
        PID:14588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        16⤵
        
        PID:14604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        17⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        18⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        19⤵
        
        PID:14648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        20⤵
        
        PID:14660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        21⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        22⤵
        
        PID:14688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        23⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        24⤵
        
        PID:14716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        25⤵
        
        PID:14728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        26⤵
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        27⤵
        
        PID:14776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        28⤵
        
        PID:14808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        29⤵
        
        PID:14820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        30⤵
        
        PID:14836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        31⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        32⤵
        
        PID:14868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        33⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        34⤵
        
        PID:14900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        35⤵
        
        PID:14916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        36⤵
        
        PID:14932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        37⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        38⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        39⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        40⤵
        
        PID:14992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        41⤵
        
        PID:15012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        42⤵
        
        PID:15028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        43⤵
        
        PID:15044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        44⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        45⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        46⤵
        
        PID:15096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        47⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        48⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        49⤵
        
        PID:15140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        50⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        51⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        52⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        53⤵
        
        PID:15224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        54⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        55⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        56⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        57⤵
        
        PID:15304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        58⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        59⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        60⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        61⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        62⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        63⤵
        
        PID:4704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        64⤵
        
        PID:2792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        65⤵
        
        PID:3340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        66⤵
        
        PID:236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        67⤵
        
        PID:2884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        68⤵
        
        PID:1064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        69⤵
        
        PID:4876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        70⤵
        
        PID:2684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        71⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        72⤵
        
        PID:1140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        73⤵
        
        PID:14856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        74⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        75⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        76⤵
        
        PID:3448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        77⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        78⤵
        
        PID:904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        79⤵
        
        PID:4140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        80⤵
        
        PID:4340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        81⤵
        
        PID:3296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        82⤵
        
        PID:64
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        83⤵
        
        PID:2424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        84⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        85⤵
        
        PID:756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        86⤵
        
        PID:768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        87⤵
        
        PID:3604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        88⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        89⤵
        
        PID:1160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        90⤵
        
        PID:2024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        91⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        92⤵
        
        PID:2604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        93⤵
        
        PID:3456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        94⤵
        
        PID:840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        95⤵
        
        PID:2796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        96⤵
        
        PID:408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        97⤵
        
        PID:232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        98⤵
        
        PID:4304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        99⤵
        
        PID:4292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        100⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        101⤵
        
        PID:2660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        102⤵
        
        PID:3696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        103⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        104⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        105⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        106⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        107⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        108⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        109⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        110⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        111⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        112⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        113⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        114⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        115⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        116⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        117⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        118⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        119⤵
        
        PID:5844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        120⤵
        
        PID:5884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        121⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        122⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        123⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        124⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        125⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        126⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        127⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        128⤵
        
        PID:536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        129⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        130⤵
        
        PID:6204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        131⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        132⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        133⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        134⤵
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        135⤵
        
        PID:6356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        136⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        137⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        138⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        139⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        140⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        141⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        142⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        143⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        144⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        145⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        146⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        147⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        148⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        149⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        150⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        151⤵
        
        PID:6968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        152⤵
        
        PID:7000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        153⤵
        
        PID:7012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        154⤵
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        155⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        156⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        157⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        158⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        159⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        160⤵
        
        PID:7220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        161⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        162⤵
        
        PID:7276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        163⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        164⤵
        
        PID:7356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        165⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        166⤵
        
        PID:7412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        167⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        168⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        169⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        170⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        171⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        172⤵
        
        PID:7688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        173⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        174⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        175⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        176⤵
        
        PID:7820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        177⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        178⤵
        
        PID:7912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        179⤵
        
        PID:7996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        180⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        181⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        182⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        183⤵
        
        PID:8136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        184⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        185⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        186⤵
        
        PID:3748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        187⤵
        
        PID:1676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        188⤵
        
        PID:2592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        189⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        190⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        191⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        192⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        193⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        194⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        195⤵
        
        PID:8384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        196⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        197⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        198⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        199⤵
        
        PID:8500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        200⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        201⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        202⤵
        
        PID:8592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        203⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        204⤵
        
        PID:8640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        205⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        206⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        207⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        208⤵
        
        PID:8860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        209⤵
        
        PID:8892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        210⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        211⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        212⤵
        
        PID:8976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        213⤵
        
        PID:7416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        214⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        215⤵
        
        PID:9016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        216⤵
        
        PID:9044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        217⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        218⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        219⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        220⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        221⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        222⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        223⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        224⤵
        
        PID:9308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        225⤵
        
        PID:9340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        226⤵
        
        PID:9368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        227⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        228⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        229⤵
        
        PID:9472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        230⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        231⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        232⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        233⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\6e4a2a1face9f6cd610feee04e0fec28.dll,#1
        234⤵
        
        PID:9660

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads