f4827f92fe5beea3ebafe0932bb238244640063844b614d71caa2d6b2400a50a

Analysis

max time kernel
140s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 23:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

06f5d72511942c43bc05099625d05ad7.dll
Size

94KB
MD5

06f5d72511942c43bc05099625d05ad7
SHA1

3a7de891edd9353e7639707b0bc956b44ee46543
SHA256

f4827f92fe5beea3ebafe0932bb238244640063844b614d71caa2d6b2400a50a
SHA512

a9ffa5723f9ac3ebf338558e66c07169619ca3791c7825cd67d6d03b63edb73424d95ea0b2b51666228d4640da70bf435dbff92a209a522bfd189a6520ca421e
SSDEEP

1536:LtpCNcge6I+BOZcuI/N+ZakLmSIg4TotPOhr/nswUkoYgLnlmQub:xpCrza9qN+Za1RTo7wUAgLlBs

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 5016	4960	rundll32.exe	39
PID 4960 wrote to memory of 5016	4960	rundll32.exe	39
PID 4960 wrote to memory of 5016	4960	rundll32.exe	39
PID 5016 wrote to memory of 2056	5016	rundll32.exe	90
PID 5016 wrote to memory of 2056	5016	rundll32.exe	90
PID 5016 wrote to memory of 2056	5016	rundll32.exe	90
PID 2056 wrote to memory of 1076	2056	rundll32.exe	91
PID 2056 wrote to memory of 1076	2056	rundll32.exe	91
PID 2056 wrote to memory of 1076	2056	rundll32.exe	91
PID 1076 wrote to memory of 4312	1076	rundll32.exe	92
PID 1076 wrote to memory of 4312	1076	rundll32.exe	92
PID 1076 wrote to memory of 4312	1076	rundll32.exe	92
PID 4312 wrote to memory of 3256	4312	rundll32.exe	93
PID 4312 wrote to memory of 3256	4312	rundll32.exe	93
PID 4312 wrote to memory of 3256	4312	rundll32.exe	93
PID 3256 wrote to memory of 3628	3256	rundll32.exe	94
PID 3256 wrote to memory of 3628	3256	rundll32.exe	94
PID 3256 wrote to memory of 3628	3256	rundll32.exe	94
PID 3628 wrote to memory of 2568	3628	rundll32.exe	95
PID 3628 wrote to memory of 2568	3628	rundll32.exe	95
PID 3628 wrote to memory of 2568	3628	rundll32.exe	95
PID 2568 wrote to memory of 5056	2568	rundll32.exe	96
PID 2568 wrote to memory of 5056	2568	rundll32.exe	96
PID 2568 wrote to memory of 5056	2568	rundll32.exe	96
PID 5056 wrote to memory of 2460	5056	rundll32.exe	97
PID 5056 wrote to memory of 2460	5056	rundll32.exe	97
PID 5056 wrote to memory of 2460	5056	rundll32.exe	97
PID 2460 wrote to memory of 1588	2460	rundll32.exe	98
PID 2460 wrote to memory of 1588	2460	rundll32.exe	98
PID 2460 wrote to memory of 1588	2460	rundll32.exe	98
PID 1588 wrote to memory of 2204	1588	rundll32.exe	99
PID 1588 wrote to memory of 2204	1588	rundll32.exe	99
PID 1588 wrote to memory of 2204	1588	rundll32.exe	99
PID 2204 wrote to memory of 2084	2204	rundll32.exe	100
PID 2204 wrote to memory of 2084	2204	rundll32.exe	100
PID 2204 wrote to memory of 2084	2204	rundll32.exe	100
PID 2084 wrote to memory of 4016	2084	rundll32.exe	101
PID 2084 wrote to memory of 4016	2084	rundll32.exe	101
PID 2084 wrote to memory of 4016	2084	rundll32.exe	101
PID 4016 wrote to memory of 4968	4016	rundll32.exe	102
PID 4016 wrote to memory of 4968	4016	rundll32.exe	102
PID 4016 wrote to memory of 4968	4016	rundll32.exe	102
PID 4968 wrote to memory of 1796	4968	rundll32.exe	103
PID 4968 wrote to memory of 1796	4968	rundll32.exe	103
PID 4968 wrote to memory of 1796	4968	rundll32.exe	103
PID 1796 wrote to memory of 3032	1796	rundll32.exe	104
PID 1796 wrote to memory of 3032	1796	rundll32.exe	104
PID 1796 wrote to memory of 3032	1796	rundll32.exe	104
PID 3032 wrote to memory of 976	3032	rundll32.exe	105
PID 3032 wrote to memory of 976	3032	rundll32.exe	105
PID 3032 wrote to memory of 976	3032	rundll32.exe	105
PID 976 wrote to memory of 4464	976	rundll32.exe	106
PID 976 wrote to memory of 4464	976	rundll32.exe	106
PID 976 wrote to memory of 4464	976	rundll32.exe	106
PID 4464 wrote to memory of 4476	4464	rundll32.exe	107
PID 4464 wrote to memory of 4476	4464	rundll32.exe	107
PID 4464 wrote to memory of 4476	4464	rundll32.exe	107
PID 4476 wrote to memory of 2356	4476	rundll32.exe	108
PID 4476 wrote to memory of 2356	4476	rundll32.exe	108
PID 4476 wrote to memory of 2356	4476	rundll32.exe	108
PID 2356 wrote to memory of 1064	2356	rundll32.exe	109
PID 2356 wrote to memory of 1064	2356	rundll32.exe	109
PID 2356 wrote to memory of 1064	2356	rundll32.exe	109
PID 1064 wrote to memory of 880	1064	rundll32.exe	110

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5016
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2056
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1076
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4312
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:2568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:5056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:2460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:1588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:2084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:4016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:4968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:3032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        23⤵
        
        PID:880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        24⤵
        
        PID:4656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        25⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        26⤵
        
        PID:4536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        27⤵
        
        PID:4484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        28⤵
        
        PID:3736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        29⤵
        
        PID:1364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        30⤵
        
        PID:2804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        31⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        32⤵
        
        PID:556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        33⤵
        
        PID:2720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        34⤵
        
        PID:1944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        35⤵
        
        PID:3484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        36⤵
        
        PID:2316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        37⤵
        
        PID:428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        38⤵
        
        PID:3128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        39⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        40⤵
        
        PID:316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        41⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        42⤵
        
        PID:3492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        43⤵
        
        PID:5080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        44⤵
        
        PID:3548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        45⤵
        
        PID:1428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        46⤵
        
        PID:4320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        47⤵
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        48⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        49⤵
        
        PID:3456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        50⤵
        
        PID:4568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        51⤵
        
        PID:2908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        52⤵
        
        PID:3728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        53⤵
        
        PID:4544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        54⤵
        
        PID:4716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        55⤵
        
        PID:1676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        56⤵
        
        PID:4104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        57⤵
        
        PID:2268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        58⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        59⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        60⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        61⤵
        
        PID:1480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        62⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        63⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        64⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        65⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        66⤵
        
        PID:3104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        67⤵
        
        PID:872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        68⤵
        
        PID:1628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        69⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        70⤵
        
        PID:4548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        71⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        72⤵
        
        PID:468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        73⤵
        
        PID:2144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        74⤵
        
        PID:2244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        75⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        76⤵
        
        PID:4268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        77⤵
        
        PID:3984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        78⤵
        
        PID:3752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        79⤵
        
        PID:540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        80⤵
        
        PID:1976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        81⤵
        
        PID:1608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:1632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5176
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5288
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5400
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5416
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:5432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5528
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5588
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5708
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5756
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5796
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5852
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5912
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:5972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6012
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6028
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:6044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6072
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6160
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:4660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6220
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6268
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6320
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6400
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6448
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6496
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6664
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6676
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:6688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6724
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6736
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:6752
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:6768
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:6784
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:6824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:6888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6916
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:6928
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:6940
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:6960
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:6976
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:6992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:7008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:7040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:6904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7076
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:7092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7136
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:7148
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:7160
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:7172
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:7260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7288
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7324
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7348
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7360
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:7376
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:7392
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:7408
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:7484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7516
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7572
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7636
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7680
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7760
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7840
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7908
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:7924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7976
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:7988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8084
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8136
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:8156
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:8172
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:8188
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:8216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:8232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:8280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:8320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        
        PID:8372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        
        PID:8384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        14⤵
        
        PID:8432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        15⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        16⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        17⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        18⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        19⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        20⤵
        
        PID:8576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        21⤵
        
        PID:8596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        22⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        23⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        24⤵
        
        PID:8664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        25⤵
        
        PID:8680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        26⤵
        
        PID:8696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        27⤵
        
        PID:8712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        28⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        29⤵
        
        PID:8744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        30⤵
        
        PID:8756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8792
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8844
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8912
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:8928
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:8940
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:8956
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:8988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:9040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9052
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9068
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:9084
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:9100
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:9116
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        
        PID:3868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        
        PID:9228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        14⤵
        
        PID:9248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        15⤵
        
        PID:9264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        16⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        17⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        18⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        19⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        20⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        21⤵
        
        PID:9356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9388
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9432
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9444
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:9460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9484
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9536
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9572
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9624
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9640
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:9656
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:9672
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:9692
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:9704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9740
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9824
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9840
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:9852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9876
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9924
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:9980
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9992
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10012
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:10044
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:10072
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:10132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10168
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10228
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:9176
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10252
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:10268
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:10280
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:10296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:10372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10400
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10412
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10432
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:10448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10476
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10492
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10540
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10616
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10676
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10720
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10768
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10804
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:10816
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:10832
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:10848
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:10868
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:10892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:10908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:10924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        
        PID:11004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        14⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        15⤵
        
        PID:11032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:10752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11120
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11144
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11160
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:11172
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:11184
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:11196
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:11228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:11244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        
        PID:11308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        14⤵
        
        PID:11324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        15⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        16⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        17⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        18⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        19⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        20⤵
        
        PID:11416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11444
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11496
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11536
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11552
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:11568
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:11580
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:11600
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:11616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11640
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11696
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11748
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11776
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11828
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:11844
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:11860
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:11876
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:11888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12012
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12028
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12076
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:12104
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:12120
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:12140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:12172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        
        PID:12264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        14⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        15⤵
        
        PID:11928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        16⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        17⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        18⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        19⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        20⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        21⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        22⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        23⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        24⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        25⤵
        
        PID:12448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:11904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12476
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12488
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:12504
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:12520
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:12536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:12552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:12564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12580
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12596
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12612
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:12628
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:12640
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        11⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        12⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        13⤵
        
        PID:12768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12788
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12808
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12852
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12916
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12928
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:12960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:12976
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12992
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:13008
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:13024
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:13052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        8⤵
        
        PID:13068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        9⤵
        
        PID:13084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        10⤵
        
        PID:13096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13112
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13124
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:13144
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:13164
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:13184
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:13196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13244
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:13256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13292
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13308
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:12216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:3632
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:1592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13332
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13404
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13416
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:13436
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:13452
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:13468
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:13484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:4404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13496
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13508
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:13524
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:13540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13556
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13568
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:13580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13612
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13668
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13728
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13756
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13804
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13964
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:13976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14016
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14032
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14044
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:14060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:13788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14072
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14088
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14128
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14140
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14168
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14196
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14208
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14260
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14296
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14312
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:3940
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14396
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14420
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14432
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14472
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14520
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14544
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14568
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14580
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14592
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:14608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14620
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14676
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14712
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14764
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14812
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:14828
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:14848
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:14864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14888
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14940
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:14952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14996
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15040
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15076
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15164
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15220
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15260
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15312
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:4012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15424
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15480
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15524
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15576
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15612
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15660
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15696
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15748
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15804
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15860
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:15972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16008
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16056
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16128
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
    3⤵
    PID:16144
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
      4⤵
      PID:16160
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        5⤵
        
        PID:16176
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        6⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
        7⤵
        
        PID:16212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:15028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16284
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:14648
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:8200
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:8204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:5052
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:1376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16400
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16448
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16500
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16544
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
  2⤵
  PID:16612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:2436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:7752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:4400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#1
1⤵
PID:16228

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads