968bc0bd42bdd9becb8a3adfca08d6404a149b9d5d6f592cd817a5966009ffc5

Analysis

max time kernel
145s
max time network
192s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04/01/2024, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4230230b4bd21bef0951c001226212f2.dll
Size

758B
MD5

4230230b4bd21bef0951c001226212f2
SHA1

22e0d733e535d0bacf190ccf5b16b45bbcafb5ec
SHA256

968bc0bd42bdd9becb8a3adfca08d6404a149b9d5d6f592cd817a5966009ffc5
SHA512

75df2b97da8543c5d7ff1833f8affaa7c63fce0b77f34ef3abdf6432b0bb88d4e8a84d3cde55be7fe0150b9a36fb5feb974d7a63c8a2a8fbdb3cbeacc65bfe03

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2564	2244	rundll32.exe	62
PID 2244 wrote to memory of 2564	2244	rundll32.exe	62
PID 2244 wrote to memory of 2564	2244	rundll32.exe	62
PID 2564 wrote to memory of 3904	2564	rundll32.exe	90
PID 2564 wrote to memory of 3904	2564	rundll32.exe	90
PID 2564 wrote to memory of 3904	2564	rundll32.exe	90
PID 3904 wrote to memory of 4920	3904	rundll32.exe	91
PID 3904 wrote to memory of 4920	3904	rundll32.exe	91
PID 3904 wrote to memory of 4920	3904	rundll32.exe	91
PID 4920 wrote to memory of 1500	4920	rundll32.exe	92
PID 4920 wrote to memory of 1500	4920	rundll32.exe	92
PID 4920 wrote to memory of 1500	4920	rundll32.exe	92
PID 1500 wrote to memory of 5072	1500	rundll32.exe	93
PID 1500 wrote to memory of 5072	1500	rundll32.exe	93
PID 1500 wrote to memory of 5072	1500	rundll32.exe	93
PID 5072 wrote to memory of 3664	5072	rundll32.exe	94
PID 5072 wrote to memory of 3664	5072	rundll32.exe	94
PID 5072 wrote to memory of 3664	5072	rundll32.exe	94
PID 3664 wrote to memory of 5108	3664	rundll32.exe	95
PID 3664 wrote to memory of 5108	3664	rundll32.exe	95
PID 3664 wrote to memory of 5108	3664	rundll32.exe	95
PID 5108 wrote to memory of 5056	5108	rundll32.exe	96
PID 5108 wrote to memory of 5056	5108	rundll32.exe	96
PID 5108 wrote to memory of 5056	5108	rundll32.exe	96
PID 5056 wrote to memory of 408	5056	rundll32.exe	97
PID 5056 wrote to memory of 408	5056	rundll32.exe	97
PID 5056 wrote to memory of 408	5056	rundll32.exe	97
PID 408 wrote to memory of 4564	408	rundll32.exe	98
PID 408 wrote to memory of 4564	408	rundll32.exe	98
PID 408 wrote to memory of 4564	408	rundll32.exe	98
PID 4564 wrote to memory of 820	4564	rundll32.exe	99
PID 4564 wrote to memory of 820	4564	rundll32.exe	99
PID 4564 wrote to memory of 820	4564	rundll32.exe	99
PID 820 wrote to memory of 5084	820	rundll32.exe	100
PID 820 wrote to memory of 5084	820	rundll32.exe	100
PID 820 wrote to memory of 5084	820	rundll32.exe	100
PID 5084 wrote to memory of 3568	5084	rundll32.exe	101
PID 5084 wrote to memory of 3568	5084	rundll32.exe	101
PID 5084 wrote to memory of 3568	5084	rundll32.exe	101
PID 3568 wrote to memory of 3144	3568	rundll32.exe	102
PID 3568 wrote to memory of 3144	3568	rundll32.exe	102
PID 3568 wrote to memory of 3144	3568	rundll32.exe	102
PID 3144 wrote to memory of 1620	3144	rundll32.exe	103
PID 3144 wrote to memory of 1620	3144	rundll32.exe	103
PID 3144 wrote to memory of 1620	3144	rundll32.exe	103
PID 1620 wrote to memory of 1028	1620	rundll32.exe	104
PID 1620 wrote to memory of 1028	1620	rundll32.exe	104
PID 1620 wrote to memory of 1028	1620	rundll32.exe	104
PID 1028 wrote to memory of 4028	1028	rundll32.exe	105
PID 1028 wrote to memory of 4028	1028	rundll32.exe	105
PID 1028 wrote to memory of 4028	1028	rundll32.exe	105
PID 4028 wrote to memory of 1184	4028	rundll32.exe	106
PID 4028 wrote to memory of 1184	4028	rundll32.exe	106
PID 4028 wrote to memory of 1184	4028	rundll32.exe	106
PID 1184 wrote to memory of 1916	1184	rundll32.exe	107
PID 1184 wrote to memory of 1916	1184	rundll32.exe	107
PID 1184 wrote to memory of 1916	1184	rundll32.exe	107
PID 1916 wrote to memory of 3040	1916	rundll32.exe	110
PID 1916 wrote to memory of 3040	1916	rundll32.exe	110
PID 1916 wrote to memory of 3040	1916	rundll32.exe	110
PID 3040 wrote to memory of 1700	3040	rundll32.exe	111
PID 3040 wrote to memory of 1700	3040	rundll32.exe	111
PID 3040 wrote to memory of 1700	3040	rundll32.exe	111
PID 1700 wrote to memory of 3468	1700	rundll32.exe	112

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2564
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3904
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4920
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:1500
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:5072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:5056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:5084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:3144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:1028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:1916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:3040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        23⤵
        
        PID:3468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        24⤵
        
        PID:4568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        25⤵
        
        PID:2228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        26⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        27⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        28⤵
        
        PID:2372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        29⤵
        
        PID:784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        30⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        31⤵
        
        PID:780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        32⤵
        
        PID:1968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        33⤵
        
        PID:1636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        34⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        35⤵
        
        PID:2080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        36⤵
        
        PID:3536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        37⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        38⤵
        
        PID:4704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        39⤵
        
        PID:3540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        40⤵
        
        PID:3384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        41⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        42⤵
        
        PID:2200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        43⤵
        
        PID:1800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        44⤵
        
        PID:4748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        45⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        46⤵
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        47⤵
        
        PID:5040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        48⤵
        
        PID:2648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        49⤵
        
        PID:2528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        50⤵
        
        PID:3548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        51⤵
        
        PID:60
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        52⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        53⤵
        
        PID:2288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        54⤵
        
        PID:3620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        55⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        56⤵
        
        PID:336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        57⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        58⤵
        
        PID:648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        59⤵
        
        PID:2568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        60⤵
        
        PID:4756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        61⤵
        
        PID:2400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        62⤵
        
        PID:420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        63⤵
        
        PID:2388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        64⤵
        
        PID:1076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        65⤵
        
        PID:856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        66⤵
        
        PID:3988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        67⤵
        
        PID:4588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        68⤵
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        69⤵
        
        PID:2544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        70⤵
        
        PID:3380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        71⤵
        
        PID:2780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        72⤵
        
        PID:32
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        73⤵
        
        PID:2208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        74⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        75⤵
        
        PID:4536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        76⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        77⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        78⤵
        
        PID:4592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        79⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        80⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        81⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        82⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        83⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        84⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        85⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        86⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        87⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        88⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        89⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        90⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        91⤵
        
        PID:5304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        92⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        93⤵
        
        PID:5328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        94⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        95⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        96⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        97⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        98⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        99⤵
        
        PID:5408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        100⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        101⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        102⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        103⤵
        
        PID:5460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        104⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        105⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        106⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        107⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        108⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        109⤵
        
        PID:5556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        110⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        111⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        112⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        113⤵
        
        PID:5620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        114⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        115⤵
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        116⤵
        
        PID:5692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        117⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        118⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        119⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        120⤵
        
        PID:5828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        121⤵
        
        PID:5844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        122⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        123⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        124⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        125⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        126⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        127⤵
        
        PID:5968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        128⤵
        
        PID:5980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        129⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        130⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        131⤵
        
        PID:6060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        132⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        133⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        134⤵
        
        PID:6108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        135⤵
        
        PID:6120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        136⤵
        
        PID:4596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        137⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        138⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        139⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        140⤵
        
        PID:6200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        141⤵
        
        PID:6216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        142⤵
        
        PID:6228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        143⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        144⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        145⤵
        
        PID:6268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        146⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        147⤵
        
        PID:6296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        148⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        149⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        150⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        151⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        152⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        153⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        154⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        155⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        156⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        157⤵
        
        PID:6440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        158⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        159⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        160⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        161⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        162⤵
        
        PID:6512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        163⤵
        
        PID:6524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        164⤵
        
        PID:6540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        165⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        166⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        167⤵
        
        PID:6576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        168⤵
        
        PID:6588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        169⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        170⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        171⤵
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        172⤵
        
        PID:6636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        173⤵
        
        PID:6648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        174⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        175⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        176⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        177⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        178⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        179⤵
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        180⤵
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        181⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        182⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        183⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        184⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        185⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        186⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        187⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        188⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        189⤵
        
        PID:6888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        190⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        191⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        192⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        193⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        194⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        195⤵
        
        PID:6984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        196⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        197⤵
        
        PID:7012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        198⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        199⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        200⤵
        
        PID:7056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        201⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        202⤵
        
        PID:7088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        203⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        204⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        205⤵
        
        PID:7136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        206⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        207⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        208⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        209⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        210⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        211⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        212⤵
        
        PID:7340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        213⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        214⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        215⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        216⤵
        
        PID:7412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        217⤵
        
        PID:7428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        218⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        219⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        220⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        221⤵
        
        PID:7500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        222⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        223⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        224⤵
        
        PID:7548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        225⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        226⤵
        
        PID:7580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        227⤵
        
        PID:7592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        228⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        229⤵
        
        PID:7624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        230⤵
        
        PID:7640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        231⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        232⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        233⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        234⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        235⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        236⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        237⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        238⤵
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        239⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        240⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        241⤵
        
        PID:7812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        242⤵
        
        PID:7832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        243⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        244⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        245⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        246⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        247⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        248⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        249⤵
        
        PID:7952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        250⤵
        
        PID:7968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        251⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        252⤵
        
        PID:8000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        253⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        254⤵
        
        PID:8028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        255⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        256⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        257⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        258⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        259⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        260⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        261⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        262⤵
        
        PID:8140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        263⤵
        
        PID:8152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        264⤵
        
        PID:8168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        265⤵
        
        PID:8184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        266⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        267⤵
        
        PID:3320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        268⤵
        
        PID:3972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        269⤵
        
        PID:444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        270⤵
        
        PID:1412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        271⤵
        
        PID:3240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        272⤵
        
        PID:1832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        273⤵
        
        PID:3424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        274⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        275⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        276⤵
        
        PID:4316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        277⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        278⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        279⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        280⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        281⤵
        
        PID:8264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        282⤵
        
        PID:8280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        283⤵
        
        PID:8296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        284⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        285⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        286⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        287⤵
        
        PID:8352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        288⤵
        
        PID:8372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        289⤵
        
        PID:8388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        290⤵
        
        PID:8400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        291⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        292⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        293⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        294⤵
        
        PID:8464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        295⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        296⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        297⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        298⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        299⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        300⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        301⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        302⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        303⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        304⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        305⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        306⤵
        
        PID:8628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        307⤵
        
        PID:8644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        308⤵
        
        PID:8656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        309⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        310⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        311⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        312⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        313⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        314⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        315⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        316⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        317⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        318⤵
        
        PID:8820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        319⤵
        
        PID:8836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        320⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        321⤵
        
        PID:8860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        322⤵
        
        PID:8876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        323⤵
        
        PID:8892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        324⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        325⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        326⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        327⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        328⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        329⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        330⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        331⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        332⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        333⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        334⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        335⤵
        
        PID:9068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        336⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        337⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        338⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        339⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        340⤵
        
        PID:9132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        341⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        342⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        343⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        344⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        345⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        346⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        347⤵
        
        PID:8452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        348⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        349⤵
        
        PID:9224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        350⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        351⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        352⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        353⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        354⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        355⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        356⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        357⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        358⤵
        
        PID:9348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        359⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        360⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        361⤵
        
        PID:9388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        362⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        363⤵
        
        PID:9416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        364⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        365⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        366⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        367⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        368⤵
        
        PID:9484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        369⤵
        
        PID:9500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        370⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        371⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        372⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        373⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        374⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        375⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        376⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        377⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        378⤵
        
        PID:9632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        379⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        380⤵
        
        PID:9664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        381⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        382⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        383⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        384⤵
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        385⤵
        
        PID:9728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        386⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        387⤵
        
        PID:9764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        388⤵
        
        PID:9776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        389⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        390⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        391⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        392⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        393⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        394⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        395⤵
        
        PID:9872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        396⤵
        
        PID:9888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        397⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        398⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        399⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        400⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        401⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        402⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        403⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        404⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        405⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        406⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        407⤵
        
        PID:10056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        408⤵
        
        PID:10072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        409⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        410⤵
        
        PID:10104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        411⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        412⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        413⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        414⤵
        
        PID:10164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        415⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        416⤵
        
        PID:10192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        417⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        418⤵
        
        PID:10220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        419⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        420⤵
        
        PID:4584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        421⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        422⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        423⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        424⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        425⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        426⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        427⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        428⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        429⤵
        
        PID:10328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        430⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        431⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        432⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        433⤵
        
        PID:10388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        434⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        435⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        436⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        437⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        438⤵
        
        PID:10476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        439⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        440⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        441⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        442⤵
        
        PID:10536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        443⤵
        
        PID:10552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        444⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        445⤵
        
        PID:10588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        446⤵
        
        PID:10604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        447⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        448⤵
        
        PID:10636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        449⤵
        
        PID:10652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        450⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        451⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        452⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        453⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        454⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        455⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        456⤵
        
        PID:10756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        457⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        458⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        459⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        460⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        461⤵
        
        PID:10832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        462⤵
        
        PID:10844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        463⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        464⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        465⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        466⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        467⤵
        
        PID:10908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        468⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        469⤵
        
        PID:10932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        470⤵
        
        PID:10948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        471⤵
        
        PID:10964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        472⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        473⤵
        
        PID:11000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        474⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        475⤵
        
        PID:11028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        476⤵
        
        PID:11040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        477⤵
        
        PID:11052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        478⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        479⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        480⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        481⤵
        
        PID:11112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        482⤵
        
        PID:11124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        483⤵
        
        PID:11140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        484⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        485⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        486⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        487⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        488⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        489⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        490⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        491⤵
        
        PID:10268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        492⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        493⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        494⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        495⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        496⤵
        
        PID:3004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        497⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        498⤵
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        499⤵
        
        PID:11308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        500⤵
        
        PID:11324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        501⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        502⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        503⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        504⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        505⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        506⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        507⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        508⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        509⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        510⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        511⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        512⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        513⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        514⤵
        
        PID:11528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        515⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        516⤵
        
        PID:11556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        517⤵
        
        PID:11572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        518⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        519⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        520⤵
        
        PID:11620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        521⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        522⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        523⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        524⤵
        
        PID:11672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        525⤵
        
        PID:11684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        526⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        527⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        528⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        529⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        530⤵
        
        PID:11760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        531⤵
        
        PID:11776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        532⤵
        
        PID:11792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        533⤵
        
        PID:11808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        534⤵
        
        PID:11824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        535⤵
        
        PID:11840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        536⤵
        
        PID:11852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        537⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        538⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        539⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        540⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        541⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        542⤵
        
        PID:11944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        543⤵
        
        PID:11960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        544⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        545⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        546⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        547⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        548⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        549⤵
        
        PID:12056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        550⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        551⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        552⤵
        
        PID:12096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        553⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        554⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        555⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        556⤵
        
        PID:12160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        557⤵
        
        PID:12172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        558⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        559⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        560⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        561⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        562⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        563⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        564⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        565⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        566⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        567⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        568⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        569⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        570⤵
        
        PID:2640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        571⤵
        
        PID:2304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        572⤵
        
        PID:3156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        573⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        574⤵
        
        PID:3212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        575⤵
        
        PID:2052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        576⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        577⤵
        
        PID:3448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        578⤵
        
        PID:4844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        579⤵
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        580⤵
        
        PID:2516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        581⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        582⤵
        
        PID:1704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        583⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        584⤵
        
        PID:936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        585⤵
        
        PID:3512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        586⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        587⤵
        
        PID:2508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        588⤵
        
        PID:440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        589⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        590⤵
        
        PID:2632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        591⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        592⤵
        
        PID:1864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        593⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        594⤵
        
        PID:1148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        595⤵
        
        PID:2812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        596⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        597⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        598⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        599⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        600⤵
        
        PID:12324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        601⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        602⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        603⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        604⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        605⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        606⤵
        
        PID:12416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        607⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        608⤵
        
        PID:12448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        609⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        610⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        611⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        612⤵
        
        PID:12504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        613⤵
        
        PID:12520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        614⤵
        
        PID:12536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        615⤵
        
        PID:12552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        616⤵
        
        PID:12564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        617⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        618⤵
        
        PID:12588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        619⤵
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        620⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        621⤵
        
        PID:12632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        622⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        623⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        624⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        625⤵
        
        PID:12708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        626⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        627⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        628⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        629⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        630⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        631⤵
        
        PID:12796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        632⤵
        
        PID:12808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        633⤵
        
        PID:12824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        634⤵
        
        PID:12840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        635⤵
        
        PID:12852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        636⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        637⤵
        
        PID:12876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        638⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        639⤵
        
        PID:12908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        640⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        641⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        642⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        643⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        644⤵
        
        PID:12980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        645⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        646⤵
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        647⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        648⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        649⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        650⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        651⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        652⤵
        
        PID:13100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        653⤵
        
        PID:13112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        654⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        655⤵
        
        PID:13140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        656⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        657⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        658⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        659⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        660⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        661⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        662⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        663⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        664⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        665⤵
        
        PID:5004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        666⤵
        
        PID:1632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        667⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        668⤵
        
        PID:1172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        669⤵
        
        PID:4964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        670⤵
        
        PID:3456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        671⤵
        
        PID:3700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        672⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        673⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        674⤵
        
        PID:5180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        675⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        676⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        677⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        678⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        679⤵
        
        PID:5400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        680⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        681⤵
        
        PID:5492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        682⤵
        
        PID:10432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        683⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        684⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        685⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        686⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        687⤵
        
        PID:5820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        688⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        689⤵
        
        PID:5864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        690⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        691⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        692⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        693⤵
        
        PID:6088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        694⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        695⤵
        
        PID:6180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        696⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        697⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        698⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        699⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        700⤵
        
        PID:6328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        701⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        702⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        703⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        704⤵
        
        PID:13328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        705⤵
        
        PID:13340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        706⤵
        
        PID:13356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        707⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        708⤵
        
        PID:13392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        709⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        710⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        711⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        712⤵
        
        PID:13456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        713⤵
        
        PID:13472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        714⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        715⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        716⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        717⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        718⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        719⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        720⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        721⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        722⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        723⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        724⤵
        
        PID:13632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        725⤵
        
        PID:13644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        726⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        727⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        728⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        729⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        730⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        731⤵
        
        PID:13728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        732⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        733⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        734⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        735⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        736⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        737⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        738⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        739⤵
        
        PID:13852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        740⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        741⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        742⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        743⤵
        
        PID:13960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        744⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        745⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        746⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        747⤵
        
        PID:14012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        748⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        749⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        750⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        751⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        752⤵
        
        PID:14092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        753⤵
        
        PID:14108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        754⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        755⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        756⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        757⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        758⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        759⤵
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        760⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        761⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        762⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        763⤵
        
        PID:14280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        764⤵
        
        PID:14296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        765⤵
        
        PID:14312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        766⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        767⤵
        
        PID:6464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        768⤵
        
        PID:6508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        769⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        770⤵
        
        PID:4300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        771⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        772⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        773⤵
        
        PID:6664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        774⤵
        
        PID:4092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        775⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        776⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        777⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        778⤵
        
        PID:6816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        779⤵
        
        PID:5044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        780⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        781⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        782⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        783⤵
        
        PID:6952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        784⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        785⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        786⤵
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        787⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        788⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        789⤵
        
        PID:2540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        790⤵
        
        PID:848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        791⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        792⤵
        
        PID:376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        793⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        794⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        795⤵
        
        PID:7336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        796⤵
        
        PID:7372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        797⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        798⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        799⤵
        
        PID:3744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        800⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        801⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        802⤵
        
        PID:7480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        803⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        804⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        805⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        806⤵
        
        PID:7620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        807⤵
        
        PID:3800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        808⤵
        
        PID:2744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        809⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        810⤵
        
        PID:7672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        811⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        812⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        813⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        814⤵
        
        PID:7796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        815⤵
        
        PID:7872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        816⤵
        
        PID:7948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        817⤵
        
        PID:8012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        818⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        819⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        820⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        821⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        822⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        823⤵
        
        PID:14348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        824⤵
        
        PID:14368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        825⤵
        
        PID:14388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        826⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        827⤵
        
        PID:14428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        828⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        829⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        830⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        831⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        832⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        833⤵
        
        PID:14548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        834⤵
        
        PID:14564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        835⤵
        
        PID:14580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        836⤵
        
        PID:14592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        837⤵
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        838⤵
        
        PID:14632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        839⤵
        
        PID:14644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        840⤵
        
        PID:14660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        841⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        842⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        843⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        844⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        845⤵
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        846⤵
        
        PID:14796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        847⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        848⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        849⤵
        
        PID:14884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        850⤵
        
        PID:14904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        851⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        852⤵
        
        PID:14932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        853⤵
        
        PID:14952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        854⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        855⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        856⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        857⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        858⤵
        
        PID:15072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4230230b4bd21bef0951c001226212f2.dll,#1
        859⤵
        
        PID:15088

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads