817e5a2f9cb06839a10092266e4a7a8b2629953cbfb2da7ea25a75d7dd03cd1c

Analysis

max time kernel
91s
max time network
112s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2025, 17:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll
Size

160KB
MD5

05c528a2b8bb20aad901c733d146d595
SHA1

ac8a2264d4adba9afd1944cd902923fcfa334e3c
SHA256

7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8
SHA512

1f9f3d38ce7df39093b924dadc241e7ec6ce23f06aa06d8d571e7c1c0d6b438dab05dd476b676f9948fd127c45fa774a7f2e16752464692583b230810521e6ed
SSDEEP

3072:Lw0AGKwe5jCHKHbmE+xNTYzYorxsFUtTBfn398t5UfDE:806we5jWSmEWNTYzfuOtTBV8tiL

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 116 wrote to memory of 2120	116	rundll32.exe	86
PID 116 wrote to memory of 2120	116	rundll32.exe	86
PID 116 wrote to memory of 2120	116	rundll32.exe	86
PID 2120 wrote to memory of 4440	2120	rundll32.exe	88
PID 2120 wrote to memory of 4440	2120	rundll32.exe	88
PID 2120 wrote to memory of 4440	2120	rundll32.exe	88
PID 4440 wrote to memory of 748	4440	rundll32.exe	89
PID 4440 wrote to memory of 748	4440	rundll32.exe	89
PID 4440 wrote to memory of 748	4440	rundll32.exe	89
PID 748 wrote to memory of 4628	748	rundll32.exe	90
PID 748 wrote to memory of 4628	748	rundll32.exe	90
PID 748 wrote to memory of 4628	748	rundll32.exe	90
PID 4628 wrote to memory of 2104	4628	rundll32.exe	91
PID 4628 wrote to memory of 2104	4628	rundll32.exe	91
PID 4628 wrote to memory of 2104	4628	rundll32.exe	91
PID 2104 wrote to memory of 4256	2104	rundll32.exe	92
PID 2104 wrote to memory of 4256	2104	rundll32.exe	92
PID 2104 wrote to memory of 4256	2104	rundll32.exe	92
PID 4256 wrote to memory of 4632	4256	rundll32.exe	93
PID 4256 wrote to memory of 4632	4256	rundll32.exe	93
PID 4256 wrote to memory of 4632	4256	rundll32.exe	93
PID 4632 wrote to memory of 3996	4632	rundll32.exe	94
PID 4632 wrote to memory of 3996	4632	rundll32.exe	94
PID 4632 wrote to memory of 3996	4632	rundll32.exe	94
PID 3996 wrote to memory of 4064	3996	rundll32.exe	95
PID 3996 wrote to memory of 4064	3996	rundll32.exe	95
PID 3996 wrote to memory of 4064	3996	rundll32.exe	95
PID 4064 wrote to memory of 3592	4064	rundll32.exe	96
PID 4064 wrote to memory of 3592	4064	rundll32.exe	96
PID 4064 wrote to memory of 3592	4064	rundll32.exe	96
PID 3592 wrote to memory of 4140	3592	rundll32.exe	97
PID 3592 wrote to memory of 4140	3592	rundll32.exe	97
PID 3592 wrote to memory of 4140	3592	rundll32.exe	97
PID 4140 wrote to memory of 4024	4140	rundll32.exe	98
PID 4140 wrote to memory of 4024	4140	rundll32.exe	98
PID 4140 wrote to memory of 4024	4140	rundll32.exe	98
PID 4024 wrote to memory of 2132	4024	rundll32.exe	99
PID 4024 wrote to memory of 2132	4024	rundll32.exe	99
PID 4024 wrote to memory of 2132	4024	rundll32.exe	99
PID 2132 wrote to memory of 2436	2132	rundll32.exe	101
PID 2132 wrote to memory of 2436	2132	rundll32.exe	101
PID 2132 wrote to memory of 2436	2132	rundll32.exe	101
PID 2436 wrote to memory of 2000	2436	rundll32.exe	102
PID 2436 wrote to memory of 2000	2436	rundll32.exe	102
PID 2436 wrote to memory of 2000	2436	rundll32.exe	102
PID 2000 wrote to memory of 2136	2000	rundll32.exe	103
PID 2000 wrote to memory of 2136	2000	rundll32.exe	103
PID 2000 wrote to memory of 2136	2000	rundll32.exe	103
PID 2136 wrote to memory of 4980	2136	rundll32.exe	104
PID 2136 wrote to memory of 4980	2136	rundll32.exe	104
PID 2136 wrote to memory of 4980	2136	rundll32.exe	104
PID 4980 wrote to memory of 1928	4980	rundll32.exe	105
PID 4980 wrote to memory of 1928	4980	rundll32.exe	105
PID 4980 wrote to memory of 1928	4980	rundll32.exe	105
PID 1928 wrote to memory of 2512	1928	rundll32.exe	106
PID 1928 wrote to memory of 2512	1928	rundll32.exe	106
PID 1928 wrote to memory of 2512	1928	rundll32.exe	106
PID 2512 wrote to memory of 184	2512	rundll32.exe	107
PID 2512 wrote to memory of 184	2512	rundll32.exe	107
PID 2512 wrote to memory of 184	2512	rundll32.exe	107
PID 184 wrote to memory of 2752	184	rundll32.exe	108
PID 184 wrote to memory of 2752	184	rundll32.exe	108
PID 184 wrote to memory of 2752	184	rundll32.exe	108
PID 2752 wrote to memory of 3944	2752	rundll32.exe	109

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2120
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4440
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:748
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4628
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:4256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:3996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:4140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:2000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:2512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        22⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        23⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        24⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        25⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        26⤵
        
        PID:3236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        27⤵
        
        PID:796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        28⤵
        
        PID:4944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        29⤵
        
        PID:2748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        30⤵
        
        PID:392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        31⤵
        
        PID:4184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        32⤵
        
        PID:3028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        33⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        34⤵
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        35⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        36⤵
        
        PID:3032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        37⤵
        
        PID:2928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        38⤵
        
        PID:2736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        39⤵
        
        PID:2308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        40⤵
        
        PID:1596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        41⤵
        
        PID:4720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        42⤵
        
        PID:4768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        43⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        44⤵
        System Location Discovery: System Language Discovery
        
        PID:4916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        45⤵
        
        PID:4872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        46⤵
        
        PID:732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        47⤵
        
        PID:2996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        48⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        49⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        50⤵
        System Location Discovery: System Language Discovery
        
        PID:2956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        51⤵
        
        PID:3452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        52⤵
        
        PID:4732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        53⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        54⤵
        
        PID:4180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        55⤵
        
        PID:5116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        56⤵
        System Location Discovery: System Language Discovery
        
        PID:996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        57⤵
        
        PID:1324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        58⤵
        
        PID:940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        59⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        60⤵
        
        PID:4488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        61⤵
        
        PID:4292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        62⤵
        
        PID:2140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        63⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        64⤵
        System Location Discovery: System Language Discovery
        
        PID:1252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        65⤵
        
        PID:2788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        66⤵
        
        PID:4756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        67⤵
        
        PID:3268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        68⤵
        System Location Discovery: System Language Discovery
        
        PID:3260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        69⤵
        
        PID:3368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        70⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        71⤵
        
        PID:4712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        72⤵
        
        PID:4896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        73⤵
        
        PID:2460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        74⤵
        
        PID:4536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        75⤵
        System Location Discovery: System Language Discovery
        
        PID:3468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        76⤵
        
        PID:4620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        77⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        78⤵
        
        PID:3044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        79⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        80⤵
        
        PID:2776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        81⤵
        
        PID:4512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        82⤵
        
        PID:1944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        83⤵
        
        PID:2844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        84⤵
        
        PID:3516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        85⤵
        
        PID:3168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        86⤵
        
        PID:4136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        87⤵
        
        PID:4332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        88⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        89⤵
        
        PID:844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        90⤵
        
        PID:2892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        91⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        92⤵
        
        PID:2480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        93⤵
        
        PID:3664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        94⤵
        
        PID:452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        95⤵
        
        PID:1900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        96⤵
        
        PID:2924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        97⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        98⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        99⤵
        
        PID:3740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        100⤵
        
        PID:3428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        101⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        102⤵
        
        PID:2828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        103⤵
        System Location Discovery: System Language Discovery
        
        PID:4412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        104⤵
        
        PID:1856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        105⤵
        
        PID:3732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        106⤵
        
        PID:4464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        107⤵
        
        PID:2360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        108⤵
        
        PID:4932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        109⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        110⤵
        
        PID:3736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        111⤵
        
        PID:8
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        112⤵
        
        PID:3152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        113⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        114⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        115⤵
        
        PID:2628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        116⤵
        
        PID:1532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        117⤵
        
        PID:1432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        118⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        119⤵
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        120⤵
        
        PID:5156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        121⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        122⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        123⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        124⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        125⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        126⤵
        
        PID:5248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        127⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        128⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        129⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        130⤵
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        131⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        132⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        133⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        134⤵
        System Location Discovery: System Language Discovery
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        135⤵
        System Location Discovery: System Language Discovery
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        136⤵
        System Location Discovery: System Language Discovery
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        137⤵
        System Location Discovery: System Language Discovery
        
        PID:5408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        138⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        139⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        140⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        141⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        142⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        143⤵
        
        PID:5492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        144⤵
        System Location Discovery: System Language Discovery
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        145⤵
        System Location Discovery: System Language Discovery
        
        PID:5520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        146⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        147⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        148⤵
        
        PID:5568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        149⤵
        
        PID:5584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        150⤵
        System Location Discovery: System Language Discovery
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        151⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        152⤵
        System Location Discovery: System Language Discovery
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        153⤵
        System Location Discovery: System Language Discovery
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        154⤵
        
        PID:5648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        155⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        156⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        157⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        158⤵
        System Location Discovery: System Language Discovery
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        159⤵
        System Location Discovery: System Language Discovery
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        160⤵
        
        PID:5728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        161⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        162⤵
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        163⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        164⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        165⤵
        
        PID:5800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        166⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        167⤵
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        168⤵
        
        PID:5848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        169⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        170⤵
        
        PID:5876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        171⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        172⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        173⤵
        
        PID:5928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        174⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        175⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        176⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        177⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        178⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        179⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        180⤵
        
        PID:6024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        181⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        182⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        183⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        184⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        185⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        186⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        187⤵
        
        PID:6120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        188⤵
        
        PID:6132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        189⤵
        System Location Discovery: System Language Discovery
        
        PID:6152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        190⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        191⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        192⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        193⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        194⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        195⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        196⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        197⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        198⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        199⤵
        System Location Discovery: System Language Discovery
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        200⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        201⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        202⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        203⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        204⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        205⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        206⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        207⤵
        
        PID:6408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        208⤵
        
        PID:6420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        209⤵
        
        PID:6436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        210⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        211⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        212⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        213⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        214⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        215⤵
        
        PID:6528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        216⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        217⤵
        
        PID:6564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        218⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        219⤵
        
        PID:6596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        220⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        221⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        222⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        223⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        224⤵
        
        PID:6676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        225⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        226⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        227⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        228⤵
        
        PID:6736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        229⤵
        System Location Discovery: System Language Discovery
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        230⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        231⤵
        
        PID:6772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        232⤵
        
        PID:6788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        233⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        234⤵
        
        PID:6816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        235⤵
        
        PID:6832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        236⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        237⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        238⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        239⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        240⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        241⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        242⤵
        System Location Discovery: System Language Discovery
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        243⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        244⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        245⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        246⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        247⤵
        
        PID:7008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        248⤵
        
        PID:7020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        249⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        250⤵
        
        PID:7048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        251⤵
        
        PID:7060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        252⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        253⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        254⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        255⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        256⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        257⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        258⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        259⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        260⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        261⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        262⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        263⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        264⤵
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        265⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        266⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        267⤵
        
        PID:7288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        268⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        269⤵
        
        PID:7316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        270⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        271⤵
        
        PID:7344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        272⤵
        
        PID:7360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        273⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        274⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        275⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        276⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        277⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        278⤵
        
        PID:7448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        279⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        280⤵
        
        PID:7480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        281⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        282⤵
        System Location Discovery: System Language Discovery
        
        PID:7508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        283⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        284⤵
        
        PID:7532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        285⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        286⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        287⤵
        System Location Discovery: System Language Discovery
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        288⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        289⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        290⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        291⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        292⤵
        
        PID:7640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        293⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        294⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        295⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        296⤵
        
        PID:7700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        297⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        298⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        299⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        300⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        301⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        302⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        303⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        304⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        305⤵
        System Location Discovery: System Language Discovery
        
        PID:7832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        306⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        307⤵
        
        PID:7864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        308⤵
        
        PID:7880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        309⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        310⤵
        
        PID:7912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        311⤵
        
        PID:7928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        312⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        313⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        314⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        315⤵
        System Location Discovery: System Language Discovery
        
        PID:7992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        316⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        317⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        318⤵
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        319⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        320⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        321⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        322⤵
        
        PID:8100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        323⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        324⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        325⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        326⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        327⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        328⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        329⤵
        
        PID:8200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        330⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        331⤵
        
        PID:8228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        332⤵
        
        PID:8244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        333⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        334⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        335⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        336⤵
        System Location Discovery: System Language Discovery
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        337⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        338⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        339⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        340⤵
        System Location Discovery: System Language Discovery
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        341⤵
        
        PID:8376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        342⤵
        
        PID:8392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        343⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        344⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        345⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        346⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        347⤵
        System Location Discovery: System Language Discovery
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        348⤵
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        349⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        350⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        351⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        352⤵
        
        PID:8552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        353⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        354⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        355⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        356⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        357⤵
        
        PID:8628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        358⤵
        
        PID:8640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        359⤵
        
        PID:8656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        360⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        361⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        362⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        363⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        364⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        365⤵
        System Location Discovery: System Language Discovery
        
        PID:8748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        366⤵
        System Location Discovery: System Language Discovery
        
        PID:8760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        367⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        368⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        369⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        370⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        371⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        372⤵
        System Location Discovery: System Language Discovery
        
        PID:8852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        373⤵
        
        PID:8868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        374⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        375⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        376⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        377⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        378⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        379⤵
        
        PID:8964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        380⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        381⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        382⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        383⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        384⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        385⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        386⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        387⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        388⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        389⤵
        
        PID:9120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        390⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        391⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        392⤵
        
        PID:9168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        393⤵
        
        PID:9184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        394⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        395⤵
        
        PID:7964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        396⤵
        
        PID:9228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        397⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        398⤵
        System Location Discovery: System Language Discovery
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        399⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        400⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        401⤵
        
        PID:9308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        402⤵
        
        PID:9324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        403⤵
        
        PID:9340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        404⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        405⤵
        
        PID:9368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        406⤵
        
        PID:9380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        407⤵
        
        PID:9400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        408⤵
        
        PID:9412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        409⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        410⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        411⤵
        
        PID:9460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        412⤵
        
        PID:9472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        413⤵
        
        PID:9488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        414⤵
        
        PID:9504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        415⤵
        
        PID:9520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        416⤵
        
        PID:9532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        417⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        418⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        419⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        420⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        421⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        422⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        423⤵
        
        PID:9640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        424⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        425⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        426⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        427⤵
        
        PID:9700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        428⤵
        
        PID:9712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        429⤵
        System Location Discovery: System Language Discovery
        
        PID:9724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        430⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        431⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        432⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        433⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        434⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        435⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        436⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        437⤵
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        438⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        439⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        440⤵
        System Location Discovery: System Language Discovery
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        441⤵
        
        PID:9908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        442⤵
        System Location Discovery: System Language Discovery
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        443⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        444⤵
        System Location Discovery: System Language Discovery
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        445⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        446⤵
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        447⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        448⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        449⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        450⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        451⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        452⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        453⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        454⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        455⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        456⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        457⤵
        
        PID:10156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        458⤵
        
        PID:10176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        459⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        460⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        461⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        462⤵
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        463⤵
        
        PID:10248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        464⤵
        
        PID:10264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        465⤵
        
        PID:10280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        466⤵
        
        PID:10296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        467⤵
        
        PID:10312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        468⤵
        
        PID:10328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        469⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        470⤵
        
        PID:10352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        471⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        472⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        473⤵
        
        PID:10396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        474⤵
        
        PID:10412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        475⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        476⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        477⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        478⤵
        
        PID:10476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        479⤵
        System Location Discovery: System Language Discovery
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        480⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        481⤵
        
        PID:10516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        482⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        483⤵
        
        PID:10548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        484⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        485⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        486⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        487⤵
        System Location Discovery: System Language Discovery
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        488⤵
        
        PID:10628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        489⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        490⤵
        
        PID:10660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        491⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        492⤵
        
        PID:10692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        493⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        494⤵
        
        PID:10724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        495⤵
        System Location Discovery: System Language Discovery
        
        PID:10740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        496⤵
        
        PID:10756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        497⤵
        
        PID:10768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        498⤵
        
        PID:10780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        499⤵
        
        PID:10796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        500⤵
        
        PID:10812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        501⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        502⤵
        
        PID:10840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        503⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        504⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        505⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        506⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        507⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        508⤵
        
        PID:10936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        509⤵
        
        PID:10952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        510⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        511⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        512⤵
        
        PID:11000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        513⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        514⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        515⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        516⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        517⤵
        
        PID:11072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        518⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        519⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        520⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        521⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        522⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        523⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        524⤵
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        525⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        526⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        527⤵
        
        PID:11228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        528⤵
        
        PID:11244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        529⤵
        
        PID:11260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        530⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        531⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        532⤵
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        533⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        534⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        535⤵
        
        PID:11348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        536⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        537⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        538⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        539⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        540⤵
        
        PID:11424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        541⤵
        
        PID:11440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        542⤵
        
        PID:11456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        543⤵
        
        PID:11472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        544⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        545⤵
        
        PID:11500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        546⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        547⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        548⤵
        
        PID:11540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        549⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        550⤵
        
        PID:11564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        551⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        552⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        553⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        554⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        555⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        556⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        557⤵
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        558⤵
        
        PID:11680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        559⤵
        System Location Discovery: System Language Discovery
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        560⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        561⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        562⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        563⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        564⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        565⤵
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        566⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        567⤵
        
        PID:11828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        568⤵
        
        PID:11840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        569⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        570⤵
        System Location Discovery: System Language Discovery
        
        PID:11872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        571⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        572⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        573⤵
        
        PID:11920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        574⤵
        
        PID:11936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        575⤵
        
        PID:11948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        576⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        577⤵
        
        PID:11980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        578⤵
        
        PID:11996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        579⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        580⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        581⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        582⤵
        
        PID:12060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        583⤵
        
        PID:12076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        584⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        585⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        586⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        587⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        588⤵
        
        PID:12152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        589⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        590⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        591⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        592⤵
        
        PID:12216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        593⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        594⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        595⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        596⤵
        System Location Discovery: System Language Discovery
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        597⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        598⤵
        
        PID:12292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        599⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        600⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        601⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        602⤵
        
        PID:12352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        603⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        604⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        605⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        606⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        607⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        608⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        609⤵
        System Location Discovery: System Language Discovery
        
        PID:12468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        610⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        611⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        612⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        613⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        614⤵
        
        PID:12540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        615⤵
        
        PID:12556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        616⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        617⤵
        
        PID:12584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        618⤵
        System Location Discovery: System Language Discovery
        
        PID:12600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        619⤵
        
        PID:12616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        620⤵
        
        PID:12628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        621⤵
        
        PID:12648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        622⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        623⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        624⤵
        
        PID:12696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        625⤵
        System Location Discovery: System Language Discovery
        
        PID:12708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        626⤵
        
        PID:12724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        627⤵
        
        PID:12740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        628⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        629⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        630⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        631⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        632⤵
        
        PID:12812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        633⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        634⤵
        
        PID:12840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        635⤵
        
        PID:12852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        636⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        637⤵
        System Location Discovery: System Language Discovery
        
        PID:12876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        638⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        639⤵
        
        PID:12908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        640⤵
        
        PID:12924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        641⤵
        System Location Discovery: System Language Discovery
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        642⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        643⤵
        
        PID:12960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        644⤵
        
        PID:12972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        645⤵
        
        PID:12988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        646⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        647⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        648⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        649⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        650⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        651⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        652⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        653⤵
        
        PID:13100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        654⤵
        
        PID:13116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        655⤵
        
        PID:13132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        656⤵
        
        PID:13148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        657⤵
        
        PID:13164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        658⤵
        
        PID:13180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        659⤵
        
        PID:13196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        660⤵
        
        PID:13212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        661⤵
        
        PID:13228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        662⤵
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        663⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        664⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        665⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        666⤵
        
        PID:13300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        667⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        668⤵
        
        PID:13324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        669⤵
        
        PID:13340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        670⤵
        
        PID:13356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        671⤵
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        672⤵
        
        PID:13384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        673⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        674⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        675⤵
        System Location Discovery: System Language Discovery
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        676⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        677⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        678⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        679⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        680⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        681⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        682⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        683⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        684⤵
        
        PID:13572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        685⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        686⤵
        
        PID:13596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        687⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        688⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        689⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        690⤵
        System Location Discovery: System Language Discovery
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        691⤵
        
        PID:13664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        692⤵
        
        PID:13676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        693⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        694⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        695⤵
        
        PID:13732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        696⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        697⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        698⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        699⤵
        
        PID:13796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        700⤵
        
        PID:13812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        701⤵
        
        PID:13828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        702⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        703⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        704⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        705⤵
        
        PID:13888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        706⤵
        
        PID:13904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        707⤵
        System Location Discovery: System Language Discovery
        
        PID:13916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        708⤵
        
        PID:13932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        709⤵
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        710⤵
        
        PID:13964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        711⤵
        
        PID:13980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        712⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        713⤵
        
        PID:14012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        714⤵
        
        PID:14028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        715⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        716⤵
        
        PID:14060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        717⤵
        
        PID:14072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        718⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        719⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        720⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        721⤵
        
        PID:14132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        722⤵
        
        PID:14148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        723⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        724⤵
        
        PID:14180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        725⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        726⤵
        
        PID:14212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        727⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        728⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        729⤵
        
        PID:14264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        730⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        731⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        732⤵
        
        PID:14300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        733⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        734⤵
        
        PID:14332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        735⤵
        
        PID:14344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        736⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        737⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        738⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        739⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        740⤵
        System Location Discovery: System Language Discovery
        
        PID:14424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        741⤵
        
        PID:14440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        742⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        743⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        744⤵
        
        PID:14484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        745⤵
        
        PID:14500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        746⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        747⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        748⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        749⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        750⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        751⤵
        
        PID:14592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        752⤵
        System Location Discovery: System Language Discovery
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        753⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        754⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        755⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        756⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        757⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        758⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        759⤵
        
        PID:14708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        760⤵
        System Location Discovery: System Language Discovery
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        761⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        762⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        763⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        764⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        765⤵
        
        PID:14796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        766⤵
        
        PID:14808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        767⤵
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        768⤵
        
        PID:14836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        769⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        770⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        771⤵
        System Location Discovery: System Language Discovery
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        772⤵
        
        PID:14896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        773⤵
        System Location Discovery: System Language Discovery
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        774⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        775⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        776⤵
        
        PID:14948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        777⤵
        
        PID:14960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        778⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        779⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        780⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        781⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        782⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        783⤵
        
        PID:15048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        784⤵
        
        PID:15064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        785⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        786⤵
        
        PID:15088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        787⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        788⤵
        
        PID:15112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        789⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        790⤵
        
        PID:15140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        791⤵
        
        PID:15156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        792⤵
        
        PID:15172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        793⤵
        
        PID:15184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        794⤵
        System Location Discovery: System Language Discovery
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        795⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        796⤵
        System Location Discovery: System Language Discovery
        
        PID:15220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        797⤵
        
        PID:15236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        798⤵
        
        PID:15248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        799⤵
        
        PID:15272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        800⤵
        
        PID:15284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        801⤵
        System Location Discovery: System Language Discovery
        
        PID:15300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        802⤵
        
        PID:15316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        803⤵
        System Location Discovery: System Language Discovery
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        804⤵
        System Location Discovery: System Language Discovery
        
        PID:15344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        805⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        806⤵
        
        PID:2016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        807⤵
        
        PID:2896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        808⤵
        
        PID:1988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        809⤵
        
        PID:1672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        810⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        811⤵
        
        PID:15388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        812⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        813⤵
        
        PID:15420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        814⤵
        
        PID:15432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        815⤵
        
        PID:15444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        816⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        817⤵
        
        PID:15468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        818⤵
        
        PID:15484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        819⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        820⤵
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        821⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        822⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        823⤵
        
        PID:15560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        824⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        825⤵
        
        PID:15596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        826⤵
        
        PID:15612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        827⤵
        
        PID:15628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        828⤵
        
        PID:15644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        829⤵
        
        PID:15660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        830⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        831⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        832⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        833⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        834⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        835⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        836⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        837⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        838⤵
        
        PID:15788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        839⤵
        
        PID:15804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        840⤵
        
        PID:15820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        841⤵
        
        PID:15836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        842⤵
        
        PID:15852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        843⤵
        
        PID:15868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        844⤵
        
        PID:15884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        845⤵
        
        PID:15928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        846⤵
        
        PID:15960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        847⤵
        
        PID:15988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        848⤵
        
        PID:16004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        849⤵
        
        PID:16016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        850⤵
        
        PID:16044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        851⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        852⤵
        
        PID:16128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        853⤵
        
        PID:16164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        854⤵
        
        PID:16192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        855⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        856⤵
        System Location Discovery: System Language Discovery
        
        PID:16228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        857⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        858⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        859⤵
        
        PID:16272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        860⤵
        
        PID:16296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        861⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        862⤵
        
        PID:16324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        863⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        864⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        865⤵
        System Location Discovery: System Language Discovery
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        866⤵
        
        PID:15268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        867⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        868⤵
        
        PID:15900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        869⤵
        
        PID:1044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        870⤵
        
        PID:1492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        871⤵
        
        PID:2652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        872⤵
        
        PID:3596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        873⤵
        
        PID:2568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        874⤵
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        875⤵
        
        PID:2620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8.dll,#1
        876⤵
        
        PID:4856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads