db8f771f2d8cb68508db9d63865c77773afccaad1c54bdc1f80f4fb5e2f44fd8

Analysis

max time kernel
157s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 12:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1890cb50cd74ba997b8e1fca9ab5fa1f.dll
Size

72KB
MD5

1890cb50cd74ba997b8e1fca9ab5fa1f
SHA1

c559ac06112c3b05f2e9983dacd632843810159e
SHA256

db8f771f2d8cb68508db9d63865c77773afccaad1c54bdc1f80f4fb5e2f44fd8
SHA512

c951f30e67d8e3bfa2e017e7395f80f22367088d14ed3b7a19524acce562377ed207f79b45fbd6acdbe39f62e524fb1e385fb17fb6f211f6e13541b989018d8c
SSDEEP

1536:08iSjFLZoHpnUg9ewlZF4uNxNOCvlMOo2XL/JbL:7LOnHewljcSWOo6LxL

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 1920	4848	rundll32.exe	88
PID 4848 wrote to memory of 1920	4848	rundll32.exe	88
PID 4848 wrote to memory of 1920	4848	rundll32.exe	88
PID 1920 wrote to memory of 2396	1920	rundll32.exe	92
PID 1920 wrote to memory of 2396	1920	rundll32.exe	92
PID 1920 wrote to memory of 2396	1920	rundll32.exe	92
PID 2396 wrote to memory of 3084	2396	rundll32.exe	93
PID 2396 wrote to memory of 3084	2396	rundll32.exe	93
PID 2396 wrote to memory of 3084	2396	rundll32.exe	93
PID 3084 wrote to memory of 2736	3084	rundll32.exe	436
PID 3084 wrote to memory of 2736	3084	rundll32.exe	436
PID 3084 wrote to memory of 2736	3084	rundll32.exe	436
PID 2736 wrote to memory of 4548	2736	rundll32.exe	94
PID 2736 wrote to memory of 4548	2736	rundll32.exe	94
PID 2736 wrote to memory of 4548	2736	rundll32.exe	94
PID 4548 wrote to memory of 1464	4548	rundll32.exe	435
PID 4548 wrote to memory of 1464	4548	rundll32.exe	435
PID 4548 wrote to memory of 1464	4548	rundll32.exe	435
PID 1464 wrote to memory of 1068	1464	rundll32.exe	95
PID 1464 wrote to memory of 1068	1464	rundll32.exe	95
PID 1464 wrote to memory of 1068	1464	rundll32.exe	95
PID 1068 wrote to memory of 2724	1068	rundll32.exe	434
PID 1068 wrote to memory of 2724	1068	rundll32.exe	434
PID 1068 wrote to memory of 2724	1068	rundll32.exe	434
PID 2724 wrote to memory of 4880	2724	rundll32.exe	96
PID 2724 wrote to memory of 4880	2724	rundll32.exe	96
PID 2724 wrote to memory of 4880	2724	rundll32.exe	96
PID 4880 wrote to memory of 3784	4880	rundll32.exe	97
PID 4880 wrote to memory of 3784	4880	rundll32.exe	97
PID 4880 wrote to memory of 3784	4880	rundll32.exe	97
PID 3784 wrote to memory of 2208	3784	rundll32.exe	98
PID 3784 wrote to memory of 2208	3784	rundll32.exe	98
PID 3784 wrote to memory of 2208	3784	rundll32.exe	98
PID 2208 wrote to memory of 1952	2208	rundll32.exe	433
PID 2208 wrote to memory of 1952	2208	rundll32.exe	433
PID 2208 wrote to memory of 1952	2208	rundll32.exe	433
PID 1952 wrote to memory of 1300	1952	rundll32.exe	99
PID 1952 wrote to memory of 1300	1952	rundll32.exe	99
PID 1952 wrote to memory of 1300	1952	rundll32.exe	99
PID 1300 wrote to memory of 876	1300	rundll32.exe	432
PID 1300 wrote to memory of 876	1300	rundll32.exe	432
PID 1300 wrote to memory of 876	1300	rundll32.exe	432
PID 876 wrote to memory of 3344	876	rundll32.exe	100
PID 876 wrote to memory of 3344	876	rundll32.exe	100
PID 876 wrote to memory of 3344	876	rundll32.exe	100
PID 3344 wrote to memory of 4920	3344	rundll32.exe	101
PID 3344 wrote to memory of 4920	3344	rundll32.exe	101
PID 3344 wrote to memory of 4920	3344	rundll32.exe	101
PID 4920 wrote to memory of 4284	4920	rundll32.exe	431
PID 4920 wrote to memory of 4284	4920	rundll32.exe	431
PID 4920 wrote to memory of 4284	4920	rundll32.exe	431
PID 4284 wrote to memory of 908	4284	rundll32.exe	102
PID 4284 wrote to memory of 908	4284	rundll32.exe	102
PID 4284 wrote to memory of 908	4284	rundll32.exe	102
PID 908 wrote to memory of 828	908	rundll32.exe	430
PID 908 wrote to memory of 828	908	rundll32.exe	430
PID 908 wrote to memory of 828	908	rundll32.exe	430
PID 828 wrote to memory of 1488	828	rundll32.exe	429
PID 828 wrote to memory of 1488	828	rundll32.exe	429
PID 828 wrote to memory of 1488	828	rundll32.exe	429
PID 1488 wrote to memory of 5092	1488	rundll32.exe	103
PID 1488 wrote to memory of 5092	1488	rundll32.exe	103
PID 1488 wrote to memory of 5092	1488	rundll32.exe	103
PID 5092 wrote to memory of 4776	5092	rundll32.exe	104

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1920
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2396
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3084
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1068
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4880
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3784
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2208
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1300
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3344
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4920
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5092
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4776
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:4088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3632
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:1684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1448
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:4192
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:2532
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1436
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:3164
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:1848
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5072
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:4484
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:4048
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:2564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:2144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:772
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4044
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:3848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:3252
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5032
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5088
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:4060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:4864
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4364
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:2184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1136
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1804
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:1844
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:2884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:4272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:3040
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:2800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4640
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:4328
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:3956
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:3092
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:4276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:2356
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:1996
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:3872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:4476
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3572
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:1696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:3512
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:1224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1988
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:3648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1712
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:1516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:3812
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5128
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5160
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5240
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5284
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5320
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5332
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5404
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5424
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5472
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5488
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5524
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5540
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5556
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:5572
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:5588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5636
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5648
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5664
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:5684
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:5700
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:5744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5760
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5776
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5836
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5852
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5868
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:5880
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:5896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5916
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5932
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:5944
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:5960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5976
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:5992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6008
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6024
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6036
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:6052
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:6068
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:6104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6128
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:2844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5696
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6160
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6176
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:6192
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:6208
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:6320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6352
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6384
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6396
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6412
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:6428
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:6444
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:6488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6500
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6516
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6564
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6588
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6604
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6620
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:6636
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:6652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6668
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6680
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6696
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:6712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6728
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6744
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6776
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6824
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6836
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:6848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6864
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6880
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6912
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6924
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:6956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6968
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:6984
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7016
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7028
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7044
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7060
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:7076
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:7108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7136
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7148
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7164
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:792
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:2064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:3352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:2668
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:3236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:5104
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:6720
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7180
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7196
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:7212
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        14⤵
        
        PID:7340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        15⤵
        
        PID:7352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        16⤵
        
        PID:7368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7396
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7412
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7428
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:7444
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:7472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:7496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:7564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7576
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7596
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7612
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7628
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:7640
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:7680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7696
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7712
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7728
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7744
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:7760
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:7776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7792
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7808
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7840
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7852
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7868
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:7884
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:7900
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:7928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:7944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:7960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:7972
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:7988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8016
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8032
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8044
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8060
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:8092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8108
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8124
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8140
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8156
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8172
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:8188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:8228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8260
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8276
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8288
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8316
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8332
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8348
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8360
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8376
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:8392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8408
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8424
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8440
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8456
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8468
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:8484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:8496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8512
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8528
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8556
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8588
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8624
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8640
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8672
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8688
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8704
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8720
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8736
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:8752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8768
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8792
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8808
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8824
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8844
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8872
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8888
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:8908
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:8924
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:8936
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:8952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:8968
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:8984
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:9000
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:9016
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:9032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:9048
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:9064
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:9076
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:9092
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:9108
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:9136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:9168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        14⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        15⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        16⤵
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        17⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        18⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        19⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        20⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        21⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        22⤵
        
        PID:9344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:9360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:9376
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:9392
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:9408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:9420
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:9436
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:9452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:9468
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:9484
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:9500
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:9512
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:9528
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:9544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:9556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:9616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:9632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        14⤵
        
        PID:9664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        15⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        16⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        17⤵
        
        PID:9700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        18⤵
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        19⤵
        
        PID:9732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        20⤵
        
        PID:9748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        21⤵
        
        PID:9760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        22⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        23⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        24⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        25⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        26⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        27⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        28⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        29⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        30⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        31⤵
        
        PID:9916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        32⤵
        
        PID:9928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        33⤵
        
        PID:9944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        34⤵
        
        PID:9960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        35⤵
        
        PID:9976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        36⤵
        
        PID:9988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        37⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        38⤵
        
        PID:10024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        39⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        40⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        41⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        42⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        43⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        44⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        45⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        46⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        47⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        48⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        49⤵
        
        PID:10192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        50⤵
        
        PID:10204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        51⤵
        
        PID:10220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        52⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        53⤵
        
        PID:4460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        54⤵
        
        PID:10252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        55⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        56⤵
        
        PID:10280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        57⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        58⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        59⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        60⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        61⤵
        
        PID:10348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        62⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        63⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        64⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        65⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        66⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        67⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        68⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        69⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        70⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        71⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        72⤵
        
        PID:10516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        73⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        74⤵
        
        PID:10544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        75⤵
        
        PID:10560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        76⤵
        
        PID:10572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        77⤵
        
        PID:10584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        78⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        79⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        80⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        81⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        82⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        83⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        84⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        85⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        86⤵
        
        PID:10724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        87⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        88⤵
        
        PID:10748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        89⤵
        
        PID:10764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        90⤵
        
        PID:10780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        91⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        92⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        93⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        94⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        95⤵
        
        PID:10860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        96⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        97⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        98⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        99⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        100⤵
        
        PID:10932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        101⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        102⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        103⤵
        
        PID:10972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        104⤵
        
        PID:10988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        105⤵
        
        PID:11000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        106⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        107⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        108⤵
        
        PID:11048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        109⤵
        
        PID:11064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        110⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        111⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        112⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        113⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        114⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        115⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        116⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        117⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        118⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        119⤵
        
        PID:11204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        120⤵
        
        PID:11220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        121⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        122⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        123⤵
        
        PID:2272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        124⤵
        
        PID:3724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        125⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        126⤵
        
        PID:11276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        127⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        128⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        129⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        130⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        131⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        132⤵
        
        PID:11388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        133⤵
        
        PID:11404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        134⤵
        
        PID:11424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        135⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        136⤵
        
        PID:11484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        137⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        138⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        139⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        140⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        141⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        142⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        143⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        144⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        145⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        146⤵
        
        PID:11724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        147⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        148⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        149⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        150⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        151⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        152⤵
        
        PID:11860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        153⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        154⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        155⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        156⤵
        
        PID:11920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        157⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        158⤵
        
        PID:11948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        159⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        160⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        161⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        162⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        163⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        164⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        165⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        166⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        167⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        168⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        169⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        170⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        171⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        172⤵
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        173⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        174⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        175⤵
        
        PID:12216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        176⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        177⤵
        
        PID:12248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        178⤵
        
        PID:12264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12280
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:11212
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:4728
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:4252
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:11448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:3028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12296
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:12312
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:12328
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:12340
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:12372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12388
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12404
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:12416
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:12432
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:12444
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:12496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:12556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12580
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12612
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:12624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12636
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12672
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12700
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12716
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:12736
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:12752
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:12764
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:12796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12852
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12868
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:12888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:12908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:12924
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:12948
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:12964
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:12980
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:12992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:13008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:13036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:13048
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:13060
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:13072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:13084
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:13096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:13112
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:13128
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:13144
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:13156
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:13168
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:13184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:13200
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:13216
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:13228
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:13244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:13260
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:13276
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:13296
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:11660
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:4892
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:4988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:5044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:2452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:3132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:4348
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:4748
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:1252
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:3144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
1⤵
PID:1728
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
  2⤵
  PID:2232
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
    3⤵
    PID:992
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
      4⤵
      PID:3216
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        5⤵
        
        PID:3940
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        6⤵
        
        PID:4552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        7⤵
        
        PID:4872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        8⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        9⤵
        
        PID:4796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        10⤵
        
        PID:2932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        11⤵
        
        PID:3580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        12⤵
        
        PID:2244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        13⤵
        
        PID:1604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        14⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        15⤵
        
        PID:4580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        16⤵
        
        PID:712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        17⤵
        
        PID:3128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        18⤵
        
        PID:1672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        19⤵
        
        PID:1932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        20⤵
        
        PID:2592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        21⤵
        
        PID:4524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        22⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        23⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        24⤵
        
        PID:3148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        25⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        26⤵
        
        PID:5148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        27⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        28⤵
        
        PID:5204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        29⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        30⤵
        
        PID:5248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        31⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        32⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        33⤵
        
        PID:5376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        34⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        35⤵
        
        PID:5416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        36⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        37⤵
        
        PID:2784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        38⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        39⤵
        
        PID:5568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        40⤵
        
        PID:5580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        41⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        42⤵
        
        PID:5644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        43⤵
        
        PID:640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        44⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        45⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        46⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        47⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        48⤵
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        49⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        50⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        51⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        52⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        53⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        54⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        55⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        56⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        57⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        58⤵
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        59⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        60⤵
        
        PID:6188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        61⤵
        
        PID:6244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        62⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        63⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        64⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        65⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        66⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        67⤵
        
        PID:6440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        68⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        69⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        70⤵
        
        PID:6512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        71⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        72⤵
        
        PID:6556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        73⤵
        
        PID:6616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        74⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        75⤵
        
        PID:6676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        76⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        77⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        78⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        79⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        80⤵
        
        PID:6800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        81⤵
        
        PID:6844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        82⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        83⤵
        
        PID:6888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        84⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        85⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        86⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        87⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        88⤵
        
        PID:7072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        89⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        90⤵
        
        PID:4068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        91⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        92⤵
        
        PID:7172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        93⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        94⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        95⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        96⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        97⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        98⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        99⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        100⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        101⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        102⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        103⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        104⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        105⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        106⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        107⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        108⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        109⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        110⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        111⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        112⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        113⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        114⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        115⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        116⤵
        
        PID:8180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        117⤵
        
        PID:8208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        118⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        119⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        120⤵
        
        PID:8296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        121⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        122⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        123⤵
        
        PID:8400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        124⤵
        
        PID:8436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        125⤵
        
        PID:8464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        126⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        127⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        128⤵
        
        PID:8596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        129⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        130⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        131⤵
        
        PID:8700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        132⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        133⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        134⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        135⤵
        
        PID:8804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        136⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        137⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        138⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        139⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        140⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        141⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        142⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        143⤵
        
        PID:9040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        144⤵
        
        PID:11436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        145⤵
        
        PID:11360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        146⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        147⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        148⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        149⤵
        
        PID:9204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        150⤵
        
        PID:8052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        151⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        152⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        153⤵
        
        PID:9324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        154⤵
        
        PID:2572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        155⤵
        
        PID:9372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        156⤵
        
        PID:13324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        157⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        158⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        159⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        160⤵
        
        PID:13452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        161⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        162⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        163⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        164⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        165⤵
        
        PID:13536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        166⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        167⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        168⤵
        
        PID:13580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        169⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        170⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        171⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        172⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        173⤵
        
        PID:13652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        174⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        175⤵
        
        PID:13692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        176⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        177⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        178⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        179⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        180⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        181⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        182⤵
        
        PID:13792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        183⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        184⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        185⤵
        
        PID:13836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        186⤵
        
        PID:13848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        187⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        188⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        189⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        190⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        191⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        192⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        193⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        194⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        195⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        196⤵
        
        PID:14000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        197⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        198⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        199⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        200⤵
        
        PID:14060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        201⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        202⤵
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        203⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        204⤵
        
        PID:14116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        205⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        206⤵
        
        PID:14144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        207⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        208⤵
        
        PID:14172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        209⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        210⤵
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        211⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        212⤵
        
        PID:14236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        213⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        214⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        215⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        216⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        217⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        218⤵
        
        PID:2252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        219⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        220⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        221⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        222⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        223⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        224⤵
        
        PID:2304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        225⤵
        
        PID:9708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        226⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        227⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        228⤵
        
        PID:13944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        229⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        230⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        231⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        232⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        233⤵
        
        PID:14364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        234⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        235⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        236⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        237⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        238⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        239⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        240⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        241⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        242⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        243⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        244⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        245⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        246⤵
        
        PID:14616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        247⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        248⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        249⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        250⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        251⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        252⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        253⤵
        
        PID:14732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        254⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        255⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1890cb50cd74ba997b8e1fca9ab5fa1f.dll,#1
        256⤵
        
        PID:14788

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads