bb07ad6dc10f153d8de21f7ec9604dcced095539621f657b9037f7966e770d34

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 05:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4fb58c4ab626435b5b53af22340707a3.dll
Size

94KB
MD5

4fb58c4ab626435b5b53af22340707a3
SHA1

1a03357c0e2ed891dd976f2a4ff50742b54445a3
SHA256

bb07ad6dc10f153d8de21f7ec9604dcced095539621f657b9037f7966e770d34
SHA512

d8a71f467760bca6ec45be1a5898b24bf7411a94443d55ff31a02c911672384030599d62188477683e928998f67b438665980a09da71e073fb684271371cec44
SSDEEP

1536:KcXHqlQm3ryHK7wssAcyBKQZ10+tfkxzkicQ5GAqeN4EAy20Q+sry:KW2T3ry/ssA1gQZ10+tf6zt35GAqeN40

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1212 wrote to memory of 4448	1212	rundll32.exe	86
PID 1212 wrote to memory of 4448	1212	rundll32.exe	86
PID 1212 wrote to memory of 4448	1212	rundll32.exe	86
PID 4448 wrote to memory of 3696	4448	rundll32.exe	91
PID 4448 wrote to memory of 3696	4448	rundll32.exe	91
PID 4448 wrote to memory of 3696	4448	rundll32.exe	91
PID 3696 wrote to memory of 2396	3696	rundll32.exe	90
PID 3696 wrote to memory of 2396	3696	rundll32.exe	90
PID 3696 wrote to memory of 2396	3696	rundll32.exe	90
PID 2396 wrote to memory of 2436	2396	rundll32.exe	93
PID 2396 wrote to memory of 2436	2396	rundll32.exe	93
PID 2396 wrote to memory of 2436	2396	rundll32.exe	93
PID 2436 wrote to memory of 4708	2436	rundll32.exe	92
PID 2436 wrote to memory of 4708	2436	rundll32.exe	92
PID 2436 wrote to memory of 4708	2436	rundll32.exe	92
PID 4708 wrote to memory of 864	4708	rundll32.exe	95
PID 4708 wrote to memory of 864	4708	rundll32.exe	95
PID 4708 wrote to memory of 864	4708	rundll32.exe	95
PID 864 wrote to memory of 2596	864	rundll32.exe	94
PID 864 wrote to memory of 2596	864	rundll32.exe	94
PID 864 wrote to memory of 2596	864	rundll32.exe	94
PID 2596 wrote to memory of 924	2596	rundll32.exe	96
PID 2596 wrote to memory of 924	2596	rundll32.exe	96
PID 2596 wrote to memory of 924	2596	rundll32.exe	96
PID 924 wrote to memory of 4632	924	rundll32.exe	97
PID 924 wrote to memory of 4632	924	rundll32.exe	97
PID 924 wrote to memory of 4632	924	rundll32.exe	97
PID 4632 wrote to memory of 2040	4632	rundll32.exe	100
PID 4632 wrote to memory of 2040	4632	rundll32.exe	100
PID 4632 wrote to memory of 2040	4632	rundll32.exe	100
PID 2040 wrote to memory of 4888	2040	rundll32.exe	99
PID 2040 wrote to memory of 4888	2040	rundll32.exe	99
PID 2040 wrote to memory of 4888	2040	rundll32.exe	99
PID 4888 wrote to memory of 4452	4888	rundll32.exe	98
PID 4888 wrote to memory of 4452	4888	rundll32.exe	98
PID 4888 wrote to memory of 4452	4888	rundll32.exe	98
PID 4452 wrote to memory of 1400	4452	rundll32.exe	102
PID 4452 wrote to memory of 1400	4452	rundll32.exe	102
PID 4452 wrote to memory of 1400	4452	rundll32.exe	102
PID 1400 wrote to memory of 1376	1400	rundll32.exe	101
PID 1400 wrote to memory of 1376	1400	rundll32.exe	101
PID 1400 wrote to memory of 1376	1400	rundll32.exe	101
PID 1376 wrote to memory of 3152	1376	rundll32.exe	106
PID 1376 wrote to memory of 3152	1376	rundll32.exe	106
PID 1376 wrote to memory of 3152	1376	rundll32.exe	106
PID 3152 wrote to memory of 1224	3152	rundll32.exe	103
PID 3152 wrote to memory of 1224	3152	rundll32.exe	103
PID 3152 wrote to memory of 1224	3152	rundll32.exe	103
PID 1224 wrote to memory of 2936	1224	rundll32.exe	104
PID 1224 wrote to memory of 2936	1224	rundll32.exe	104
PID 1224 wrote to memory of 2936	1224	rundll32.exe	104
PID 2936 wrote to memory of 3452	2936	rundll32.exe	105
PID 2936 wrote to memory of 3452	2936	rundll32.exe	105
PID 2936 wrote to memory of 3452	2936	rundll32.exe	105
PID 3452 wrote to memory of 4492	3452	rundll32.exe	107
PID 3452 wrote to memory of 4492	3452	rundll32.exe	107
PID 3452 wrote to memory of 4492	3452	rundll32.exe	107
PID 4492 wrote to memory of 4960	4492	rundll32.exe	108
PID 4492 wrote to memory of 4960	4492	rundll32.exe	108
PID 4492 wrote to memory of 4960	4492	rundll32.exe	108
PID 4960 wrote to memory of 2480	4960	rundll32.exe	109
PID 4960 wrote to memory of 2480	4960	rundll32.exe	109
PID 4960 wrote to memory of 2480	4960	rundll32.exe	109
PID 2480 wrote to memory of 4008	2480	rundll32.exe	400

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4448
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4708
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2596
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:924
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4632
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4452
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1376
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2936
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3452
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4492
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4960
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:4008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:4720
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:3504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3436
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:1136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:1668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:1888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3444
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:3496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:4088
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:3524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1412
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:3044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:2208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:1724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3020
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3628
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:4936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1324
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:2708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1832
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:976
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:4892
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:1036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:4460
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:3988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:4812
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:4932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:2508
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:1132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5164
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5216
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5276
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5336
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5424
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5468
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5500
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5552
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5624
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5664
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5692
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5748
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5784
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5864
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:5880
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:5892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5924
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5964
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5992
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6048
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6096
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1184
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:4672
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:5584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6132
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6156
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:6176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6260
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6304
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6348
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6372
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6416
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6612
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6688
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6764
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6816
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6872
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6920
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6948
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6996
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7024
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7076
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7108
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7152
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6432
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:6760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7056
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7196
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:7208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7236
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7296
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7328
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7404
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7436
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7484
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7528
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7580
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7644
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7872
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7884
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:7908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7940
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7988
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8036
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8072
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8112
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8156
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8168
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7292
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:7628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8200
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8256
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8304
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8320
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8352
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8408
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8424
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8436
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:8460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8492
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8508
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8524
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:8544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8572
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8584
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8616
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8648
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8684
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8700
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:7060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:6032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8760
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8796
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8816
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8832
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:8852
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:8868
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:8952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:8984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:5148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:4568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:2152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:1588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:3844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9016
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:9032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9064
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:9080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:9132
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:9144
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:9164
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:9180
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:9196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:8300
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:8456
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:8792
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:8928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:9112
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:9224
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:9240
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:9256
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:9276
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:9308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:9412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        16⤵
        
        PID:9476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        17⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        18⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        19⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        20⤵
        
        PID:9544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        21⤵
        
        PID:9556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        22⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        23⤵
        
        PID:9604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        24⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        25⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        26⤵
        
        PID:9668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        27⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        28⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        29⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        30⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        31⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        32⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        33⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        34⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        35⤵
        
        PID:9856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        36⤵
        
        PID:9868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        37⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        38⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        39⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        40⤵
        
        PID:9932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        41⤵
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        42⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        43⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        44⤵
        
        PID:10000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        45⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        46⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        47⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        48⤵
        
        PID:10060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        49⤵
        
        PID:10072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        50⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        51⤵
        
        PID:10108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        52⤵
        
        PID:10124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        53⤵
        
        PID:10140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        54⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        55⤵
        
        PID:10172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        56⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        57⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        58⤵
        
        PID:10220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        59⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        60⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        61⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        62⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        63⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        64⤵
        
        PID:10044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        65⤵
        
        PID:10248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        66⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        67⤵
        
        PID:10284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        68⤵
        
        PID:10300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        69⤵
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        70⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        71⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        72⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        73⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        74⤵
        
        PID:10392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10436
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:10456
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:10472
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:10484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10516
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:10528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10564
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:10580
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:10592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:10620
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:10636
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:10652
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:10668
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:10748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:10760
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:10776
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:10792
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:10812
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:10828
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:10840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:10864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:10892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        16⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        17⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        18⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        19⤵
        
        PID:11028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        20⤵
        
        PID:11048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        21⤵
        
        PID:11064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        22⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        23⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        24⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        25⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        26⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        27⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        28⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        29⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        30⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        31⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        32⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        33⤵
        
        PID:11328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        34⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        35⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        36⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        37⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        38⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        39⤵
        
        PID:11416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        40⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        41⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        42⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        43⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        44⤵
        
        PID:11496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        45⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        46⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        47⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        48⤵
        
        PID:11556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:11580
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:11592
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:11608
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:11620
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:11636
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:11744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:11760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:11772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:11568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:11784
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:11800
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:11812
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:11824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:11836
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:11852
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:11864
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:11880
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:11892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:11904
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:11916
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:11932
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:11948
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:11960
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:12012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:12028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:12056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:12116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        16⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        17⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        18⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        19⤵
        
        PID:12176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        20⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        21⤵
        
        PID:12208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        22⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        23⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        24⤵
        
        PID:12256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        25⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        26⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        27⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        28⤵
        
        PID:11944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        29⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        30⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        31⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        32⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        33⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        34⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        35⤵
        
        PID:12392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        36⤵
        
        PID:12408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        37⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        38⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        39⤵
        
        PID:12448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        40⤵
        
        PID:12468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        41⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        42⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        43⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        44⤵
        
        PID:12536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        45⤵
        
        PID:12552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        46⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        47⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        48⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        49⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        50⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        51⤵
        
        PID:12636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        52⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        53⤵
        
        PID:12668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        54⤵
        
        PID:12684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        55⤵
        
        PID:12696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        56⤵
        
        PID:12716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        57⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        58⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        59⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        60⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        61⤵
        
        PID:12808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        62⤵
        
        PID:12824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        63⤵
        
        PID:12844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        64⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        65⤵
        
        PID:12880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:12896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:12908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:12920
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:12932
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:12948
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:12968
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:12988
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:13072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:13120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:13132
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:13148
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:13160
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:13176
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:13188
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:13224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:13248
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:13260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:13288
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:13300
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:12512
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:12664
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:7556
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:7564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:1600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:4916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:4416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:8
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        16⤵
        
        PID:13316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        17⤵
        
        PID:13328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        18⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        19⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        20⤵
        
        PID:13384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        21⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        22⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        23⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        24⤵
        
        PID:13444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        25⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        26⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        27⤵
        
        PID:13492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        28⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        29⤵
        
        PID:13536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        30⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        31⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        32⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        33⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        34⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        35⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        36⤵
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        37⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        38⤵
        
        PID:13684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        39⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        40⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        41⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        42⤵
        
        PID:13756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        43⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        44⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        45⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        46⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        47⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        48⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        49⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        50⤵
        
        PID:13880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        51⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        52⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        53⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        54⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        55⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        56⤵
        
        PID:13976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        57⤵
        
        PID:13992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        58⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        59⤵
        
        PID:14020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:13276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:13236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14056
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:14068
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:14080
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:14100
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:14120
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:14204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14232
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:14248
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:14260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14284
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:14296
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:14320
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:14332
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:13548
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:13876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:14348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        16⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        17⤵
        
        PID:14432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        18⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        19⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        20⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        21⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        22⤵
        
        PID:14516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        23⤵
        
        PID:14532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        24⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        25⤵
        
        PID:14564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        26⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        27⤵
        
        PID:14596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        28⤵
        
        PID:14612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        29⤵
        
        PID:14628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        30⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        31⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        32⤵
        
        PID:14664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        33⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        34⤵
        
        PID:14692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        35⤵
        
        PID:14704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
  2⤵
  PID:14748
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
    3⤵
    PID:14760
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
      4⤵
      PID:14772
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        5⤵
        
        PID:14788
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        6⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        7⤵
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        8⤵
        
        PID:14840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        9⤵
        
        PID:14856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        10⤵
        
        PID:14872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        11⤵
        
        PID:14888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        12⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        13⤵
        
        PID:14928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        14⤵
        
        PID:14944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        15⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        16⤵
        
        PID:14968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        17⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        18⤵
        
        PID:15000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        19⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        20⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        21⤵
        
        PID:15052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        22⤵
        
        PID:15072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        23⤵
        
        PID:15088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        24⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        25⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        26⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        27⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        28⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        29⤵
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        30⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        31⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        32⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        33⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        34⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        35⤵
        
        PID:15296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        36⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        37⤵
        
        PID:15328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        38⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        39⤵
        
        PID:14388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        40⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        41⤵
        
        PID:3432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        42⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        43⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        44⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        45⤵
        
        PID:3124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        46⤵
        
        PID:14812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        47⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        48⤵
        
        PID:15364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        49⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        50⤵
        
        PID:15400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        51⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        52⤵
        
        PID:15432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        53⤵
        
        PID:15448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        54⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        55⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        56⤵
        
        PID:15492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        57⤵
        
        PID:15508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        58⤵
        
        PID:15524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        59⤵
        
        PID:15544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        60⤵
        
        PID:15556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        61⤵
        
        PID:15572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        62⤵
        
        PID:15584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        63⤵
        
        PID:15600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        64⤵
        
        PID:15620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        65⤵
        
        PID:15636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        66⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        67⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        68⤵
        
        PID:15692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        69⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        70⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        71⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        72⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        73⤵
        
        PID:15788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        74⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        75⤵
        
        PID:15824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        76⤵
        
        PID:15836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        77⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        78⤵
        
        PID:15872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        79⤵
        
        PID:15892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        80⤵
        
        PID:15908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        81⤵
        
        PID:15924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        82⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        83⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        84⤵
        
        PID:15972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        85⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        86⤵
        
        PID:16004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        87⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        88⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        89⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        90⤵
        
        PID:16076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        91⤵
        
        PID:16092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        92⤵
        
        PID:16108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        93⤵
        
        PID:16124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        94⤵
        
        PID:16140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        95⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        96⤵
        
        PID:16172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        97⤵
        
        PID:16188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        98⤵
        
        PID:16204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        99⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        100⤵
        
        PID:16240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        101⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        102⤵
        
        PID:16284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        103⤵
        
        PID:16300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        104⤵
        
        PID:16320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        105⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        106⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        107⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        108⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        109⤵
        
        PID:312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        110⤵
        
        PID:15804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        111⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        112⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        113⤵
        
        PID:16332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        114⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        115⤵
        
        PID:16396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        116⤵
        
        PID:16416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        117⤵
        
        PID:16432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        118⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        119⤵
        
        PID:16472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        120⤵
        
        PID:16492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        121⤵
        
        PID:16504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        122⤵
        
        PID:16520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        123⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        124⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        125⤵
        
        PID:16572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        126⤵
        
        PID:16588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        127⤵
        
        PID:16604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        128⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        129⤵
        
        PID:16636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        130⤵
        
        PID:16648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        131⤵
        
        PID:16672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        132⤵
        
        PID:16684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        133⤵
        
        PID:16704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        134⤵
        
        PID:16716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        135⤵
        
        PID:16732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        136⤵
        
        PID:16748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        137⤵
        
        PID:16764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        138⤵
        
        PID:16784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        139⤵
        
        PID:16800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        140⤵
        
        PID:16812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        141⤵
        
        PID:16832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        142⤵
        
        PID:16848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        143⤵
        
        PID:16864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        144⤵
        
        PID:16876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        145⤵
        
        PID:16896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        146⤵
        
        PID:16912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        147⤵
        
        PID:16932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        148⤵
        
        PID:16948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        149⤵
        
        PID:16968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        150⤵
        
        PID:16980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        151⤵
        
        PID:17000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        152⤵
        
        PID:17020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        153⤵
        
        PID:17040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        154⤵
        
        PID:17052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        155⤵
        
        PID:17064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        156⤵
        
        PID:17080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        157⤵
        
        PID:17096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        158⤵
        
        PID:17112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        159⤵
        
        PID:17132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        160⤵
        
        PID:17148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        161⤵
        
        PID:17164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
        162⤵
        
        PID:17180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4fb58c4ab626435b5b53af22340707a3.dll,#1
1⤵
PID:14716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/428-10-0x0000000000560000-0x000000000057D000-memory.dmp

Filesize
116KB

Download
memory/464-22-0x0000000000830000-0x000000000084D000-memory.dmp

Filesize
116KB

Download
memory/1376-2-0x00000000004D0000-0x00000000004ED000-memory.dmp

Filesize
116KB

Download
memory/1668-8-0x00000000007E0000-0x00000000007FD000-memory.dmp

Filesize
116KB

Download
memory/1732-14-0x0000000000770000-0x000000000078D000-memory.dmp

Filesize
116KB

Download
memory/1832-17-0x00000000009E0000-0x00000000009FD000-memory.dmp

Filesize
116KB

Download
memory/2152-12-0x00000000004B0000-0x00000000004CD000-memory.dmp

Filesize
116KB

Download
memory/2480-3-0x00000000001E0000-0x00000000001FD000-memory.dmp

Filesize
116KB

Download
memory/2508-21-0x00000000006A0000-0x00000000006BD000-memory.dmp

Filesize
116KB

Download
memory/3020-15-0x0000000000590000-0x00000000005AD000-memory.dmp

Filesize
116KB

Download
memory/3044-13-0x0000000000840000-0x000000000085D000-memory.dmp

Filesize
116KB

Download
memory/3272-7-0x00000000006F0000-0x000000000070D000-memory.dmp

Filesize
116KB

Download
memory/3436-5-0x00000000007A0000-0x00000000007BD000-memory.dmp

Filesize
116KB

Download
memory/3492-18-0x0000000000890000-0x00000000008AD000-memory.dmp

Filesize
116KB

Download
memory/3844-6-0x0000000000760000-0x000000000077D000-memory.dmp

Filesize
116KB

Download
memory/4088-11-0x0000000000750000-0x000000000076D000-memory.dmp

Filesize
116KB

Download
memory/4448-0-0x0000000000440000-0x000000000045D000-memory.dmp

Filesize
116KB

Download
memory/4672-43-0x0000000000920000-0x000000000093D000-memory.dmp

Filesize
116KB

Download
memory/4720-4-0x00000000004A0000-0x00000000004BD000-memory.dmp

Filesize
116KB

Download
memory/4812-19-0x00000000007D0000-0x00000000007ED000-memory.dmp

Filesize
116KB

Download
memory/4936-16-0x0000000000710000-0x000000000072D000-memory.dmp

Filesize
116KB

Download
memory/5004-9-0x0000000000550000-0x000000000056D000-memory.dmp

Filesize
116KB

Download
memory/5116-23-0x00000000004F0000-0x000000000050D000-memory.dmp

Filesize
116KB

Download
memory/5164-24-0x0000000000860000-0x000000000087D000-memory.dmp

Filesize
116KB

Download
memory/5276-25-0x00000000009F0000-0x0000000000A0D000-memory.dmp

Filesize
116KB

Download
memory/5336-27-0x0000000000B60000-0x0000000000B7D000-memory.dmp

Filesize
116KB

Download
memory/5388-28-0x0000000000690000-0x00000000006AD000-memory.dmp

Filesize
116KB

Download
memory/5500-29-0x0000000000680000-0x000000000069D000-memory.dmp

Filesize
116KB

Download
memory/5516-30-0x0000000000580000-0x000000000059D000-memory.dmp

Filesize
116KB

Download
memory/5568-31-0x00000000003E0000-0x00000000003FD000-memory.dmp

Filesize
116KB

Download
memory/5588-32-0x0000000000AA0000-0x0000000000ABD000-memory.dmp

Filesize
116KB

Download
memory/5608-33-0x00000000005D0000-0x00000000005ED000-memory.dmp

Filesize
116KB

Download
memory/5748-35-0x0000000000990000-0x00000000009AD000-memory.dmp

Filesize
116KB

Download
memory/5812-36-0x0000000000460000-0x000000000047D000-memory.dmp

Filesize
116KB

Download
memory/5904-37-0x0000000000740000-0x000000000075D000-memory.dmp

Filesize
116KB

Download
memory/5924-38-0x0000000000790000-0x00000000007AD000-memory.dmp

Filesize
116KB

Download
memory/5944-39-0x0000000000670000-0x000000000068D000-memory.dmp

Filesize
116KB

Download
memory/6048-41-0x00000000006C0000-0x00000000006DD000-memory.dmp

Filesize
116KB

Download
memory/6156-44-0x0000000000930000-0x000000000094D000-memory.dmp

Filesize
116KB

Download
memory/6240-46-0x00000000006D0000-0x00000000006ED000-memory.dmp

Filesize
116KB

Download
memory/6272-47-0x00000000005C0000-0x00000000005DD000-memory.dmp

Filesize
116KB

Download
memory/6332-48-0x0000000000540000-0x000000000055D000-memory.dmp

Filesize
116KB

Download
memory/6464-51-0x0000000000A60000-0x0000000000A7D000-memory.dmp

Filesize
116KB

Download
memory/6504-52-0x00000000008B0000-0x00000000008CD000-memory.dmp

Filesize
116KB

Download
memory/6536-53-0x00000000009D0000-0x00000000009ED000-memory.dmp

Filesize
116KB

Download
memory/6764-55-0x0000000000850000-0x000000000086D000-memory.dmp

Filesize
116KB

Download
memory/6996-56-0x00000000005A0000-0x00000000005BD000-memory.dmp

Filesize
116KB

Download
memory/7040-57-0x0000000000880000-0x000000000089D000-memory.dmp

Filesize
116KB

Download
memory/7276-60-0x0000000000810000-0x000000000082D000-memory.dmp

Filesize
116KB

Download
memory/7360-61-0x00000000007C0000-0x00000000007DD000-memory.dmp

Filesize
116KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads