28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f

Analysis

max time kernel
5s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/02/2026, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll
Size 3.3MB
Sample260209-qevpsaex3d
SHA256 28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f
MD5 62e97e1aa12c1ff6f1311b4e9603695f
SHA1 3d58a25137acbfa2261112835d0df595f0bf9511
SHA512 1bc9ca2f69ab9f9c4ba71565c3b1ebfdc3a112fc4e779b25e7b11ba893d0de843030414b224fcf463fd21e2f77956df505aad9e7ff7b017c31c019f8113a7026
SSDEEP 24576:Kv7QBVVf+Hasdw6Swy0Zcvfi5GQZ8V5J9VUalOMUIXBEP1EnoqGTtIr1LaJzIbQk:KvsBlsVI5AM3xEP1EnEZIrQULjk8FPN
TLSH
T151F5181879CBB641FB5C2BFB88918636F3A5480AFE93D35B15D0183C58527AA0D5CACF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5000 wrote to memory of 1508	5000	rundll32.exe	86
PID 1508 wrote to memory of 5132	1508	rundll32.exe	87
PID 5132 wrote to memory of 5912	5132	rundll32.exe	88
PID 5912 wrote to memory of 6004	5912	rundll32.exe	89
PID 6004 wrote to memory of 2860	6004	rundll32.exe	90
PID 2860 wrote to memory of 1632	2860	rundll32.exe	92
PID 1632 wrote to memory of 3860	1632	rundll32.exe	93
PID 3860 wrote to memory of 5832	3860	rundll32.exe	94
PID 5832 wrote to memory of 4992	5832	rundll32.exe	95
PID 4992 wrote to memory of 848	4992	rundll32.exe	97
PID 848 wrote to memory of 1208	848	rundll32.exe	98
PID 1208 wrote to memory of 416	1208	rundll32.exe	99
PID 416 wrote to memory of 560	416	rundll32.exe	100
PID 560 wrote to memory of 5952	560	rundll32.exe	102
PID 5952 wrote to memory of 1336	5952	rundll32.exe	103
PID 1336 wrote to memory of 5108	1336	rundll32.exe	104
PID 5108 wrote to memory of 5032	5108	rundll32.exe	105
PID 5032 wrote to memory of 4904	5032	rundll32.exe	106
PID 4904 wrote to memory of 3304	4904	rundll32.exe	107
PID 3304 wrote to memory of 5924	3304	rundll32.exe	108
PID 5924 wrote to memory of 5872	5924	rundll32.exe	109
PID 5872 wrote to memory of 2140	5872	rundll32.exe	110
PID 2140 wrote to memory of 5564	2140	rundll32.exe	111
PID 5564 wrote to memory of 4604	5564	rundll32.exe	112
PID 4604 wrote to memory of 5824	4604	rundll32.exe	113
PID 5824 wrote to memory of 540	5824	rundll32.exe	114
PID 540 wrote to memory of 6052	540	rundll32.exe	115
PID 6052 wrote to memory of 5836	6052	rundll32.exe	116
PID 5836 wrote to memory of 5676	5836	rundll32.exe	117
PID 5676 wrote to memory of 3748	5676	rundll32.exe	118
PID 3748 wrote to memory of 5880	3748	rundll32.exe	119
PID 5880 wrote to memory of 2304	5880	rundll32.exe	120
PID 2304 wrote to memory of 844	2304	rundll32.exe	121
PID 844 wrote to memory of 3372	844	rundll32.exe	122
PID 3372 wrote to memory of 5308	3372	rundll32.exe	123
PID 5308 wrote to memory of 5996	5308	rundll32.exe	124
PID 5996 wrote to memory of 4452	5996	rundll32.exe	125
PID 4452 wrote to memory of 5412	4452	rundll32.exe	126
PID 5412 wrote to memory of 2020	5412	rundll32.exe	127
PID 2020 wrote to memory of 5856	2020	rundll32.exe	128
PID 5856 wrote to memory of 4108	5856	rundll32.exe	129
PID 4108 wrote to memory of 964	4108	rundll32.exe	130
PID 964 wrote to memory of 872	964	rundll32.exe	131
PID 872 wrote to memory of 1872	872	rundll32.exe	132
PID 1872 wrote to memory of 6080	1872	rundll32.exe	133
PID 6080 wrote to memory of 3736	6080	rundll32.exe	134
PID 3736 wrote to memory of 4888	3736	rundll32.exe	135
PID 4888 wrote to memory of 5040	4888	rundll32.exe	136
PID 5040 wrote to memory of 2260	5040	rundll32.exe	137
PID 2260 wrote to memory of 2392	2260	rundll32.exe	138
PID 2392 wrote to memory of 4424	2392	rundll32.exe	139
PID 4424 wrote to memory of 3704	4424	rundll32.exe	140
PID 3704 wrote to memory of 452	3704	rundll32.exe	141
PID 452 wrote to memory of 1384	452	rundll32.exe	142
PID 1384 wrote to memory of 5036	1384	rundll32.exe	143
PID 5036 wrote to memory of 2760	5036	rundll32.exe	144
PID 2760 wrote to memory of 5784	2760	rundll32.exe	145
PID 5784 wrote to memory of 5388	5784	rundll32.exe	146
PID 5388 wrote to memory of 4632	5388	rundll32.exe	147
PID 4632 wrote to memory of 672	4632	rundll32.exe	148
PID 672 wrote to memory of 1100	672	rundll32.exe	149
PID 1100 wrote to memory of 1116	1100	rundll32.exe	150
PID 1116 wrote to memory of 368	1116	rundll32.exe	151
PID 368 wrote to memory of 5548	368	rundll32.exe	152

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5000
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1508
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5132
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5912
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:6004
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        6⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:1632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        10⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        11⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:1208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        15⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:5032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        20⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        23⤵
        Suspicious use of WriteProcessMemory
        
        PID:2140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        25⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        29⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        30⤵
        Suspicious use of WriteProcessMemory
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:3748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        32⤵
        Suspicious use of WriteProcessMemory
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:2304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:3372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        36⤵
        Suspicious use of WriteProcessMemory
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:4452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        42⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        45⤵
        Suspicious use of WriteProcessMemory
        
        PID:1872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        46⤵
        Suspicious use of WriteProcessMemory
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        47⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:4888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:5040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:2260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:2392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        52⤵
        Suspicious use of WriteProcessMemory
        
        PID:4424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:3704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:1384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        56⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:2760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:5784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        59⤵
        Suspicious use of WriteProcessMemory
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:4632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:1100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:1116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        65⤵
        
        PID:5548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        66⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        67⤵
        
        PID:1884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        68⤵
        
        PID:768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        69⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        70⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        71⤵
        System Location Discovery: System Language Discovery
        
        PID:4984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        72⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        73⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        74⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        75⤵
        
        PID:5724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        76⤵
        System Location Discovery: System Language Discovery
        
        PID:4972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        77⤵
        
        PID:564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        78⤵
        
        PID:2564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        79⤵
        System Location Discovery: System Language Discovery
        
        PID:3796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        80⤵
        System Location Discovery: System Language Discovery
        
        PID:3816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        81⤵
        System Location Discovery: System Language Discovery
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        82⤵
        
        PID:4312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        83⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        84⤵
        System Location Discovery: System Language Discovery
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        85⤵
        
        PID:4236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        86⤵
        System Location Discovery: System Language Discovery
        
        PID:1608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        87⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        88⤵
        
        PID:3444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        89⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        90⤵
        
        PID:5644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        91⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        92⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        93⤵
        
        PID:4376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        94⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        95⤵
        System Location Discovery: System Language Discovery
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        96⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        97⤵
        System Location Discovery: System Language Discovery
        
        PID:5164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        98⤵
        
        PID:3584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        99⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        100⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        101⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        102⤵
        
        PID:260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        103⤵
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        104⤵
        System Location Discovery: System Language Discovery
        
        PID:3324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        105⤵
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        106⤵
        
        PID:396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        107⤵
        System Location Discovery: System Language Discovery
        
        PID:3164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        108⤵
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        109⤵
        
        PID:532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        110⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        111⤵
        
        PID:3512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        112⤵
        
        PID:2616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        113⤵
        
        PID:2148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        114⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        115⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        116⤵
        
        PID:1216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        117⤵
        System Location Discovery: System Language Discovery
        
        PID:408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        118⤵
        
        PID:4756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        119⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        120⤵
        
        PID:4456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        121⤵
        
        PID:4200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        122⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        123⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        124⤵
        
        PID:3780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        125⤵
        
        PID:3412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        126⤵
        
        PID:4120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        127⤵
        
        PID:756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        128⤵
        
        PID:1060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        129⤵
        
        PID:2828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        130⤵
        
        PID:4116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        131⤵
        System Location Discovery: System Language Discovery
        
        PID:1820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        132⤵
        
        PID:3020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        133⤵
        
        PID:628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        134⤵
        
        PID:4464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        135⤵
        System Location Discovery: System Language Discovery
        
        PID:2624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        136⤵
        
        PID:4668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        137⤵
        
        PID:2336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        138⤵
        
        PID:4432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        139⤵
        
        PID:2428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        140⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        141⤵
        
        PID:4560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        142⤵
        System Location Discovery: System Language Discovery
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        143⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        144⤵
        
        PID:4768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        145⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        146⤵
        
        PID:3036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        147⤵
        System Location Discovery: System Language Discovery
        
        PID:2812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        148⤵
        System Location Discovery: System Language Discovery
        
        PID:6060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        149⤵
        
        PID:4136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        150⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        151⤵
        
        PID:1344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        152⤵
        System Location Discovery: System Language Discovery
        
        PID:2488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        153⤵
        System Location Discovery: System Language Discovery
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        154⤵
        System Location Discovery: System Language Discovery
        
        PID:4608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        155⤵
        
        PID:4080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        156⤵
        
        PID:3016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        157⤵
        
        PID:3328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        158⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        159⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        160⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        161⤵
        System Location Discovery: System Language Discovery
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        162⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        163⤵
        
        PID:6212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        164⤵
        System Location Discovery: System Language Discovery
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        165⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        166⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        167⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        168⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        169⤵
        
        PID:6308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        170⤵
        System Location Discovery: System Language Discovery
        
        PID:6324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        171⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        172⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        173⤵
        System Location Discovery: System Language Discovery
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        174⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        175⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        176⤵
        
        PID:6416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        177⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        178⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        179⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        180⤵
        
        PID:6476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        181⤵
        
        PID:6492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        182⤵
        
        PID:6508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        183⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        184⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        185⤵
        System Location Discovery: System Language Discovery
        
        PID:6544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        186⤵
        System Location Discovery: System Language Discovery
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        187⤵
        
        PID:6576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        188⤵
        
        PID:6592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        189⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        190⤵
        
        PID:6624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        191⤵
        System Location Discovery: System Language Discovery
        
        PID:6640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        192⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        193⤵
        
        PID:6704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        194⤵
        
        PID:6724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        195⤵
        System Location Discovery: System Language Discovery
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        196⤵
        
        PID:6768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        197⤵
        
        PID:6784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        198⤵
        System Location Discovery: System Language Discovery
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        199⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        200⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        201⤵
        
        PID:6904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        202⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        203⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        204⤵
        System Location Discovery: System Language Discovery
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        205⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        206⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        207⤵
        System Location Discovery: System Language Discovery
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        208⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        209⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        210⤵
        
        PID:7136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        211⤵
        
        PID:7156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        212⤵
        
        PID:3612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        213⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        214⤵
        
        PID:2340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        215⤵
        
        PID:3256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        216⤵
        
        PID:5520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        217⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        218⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        219⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        220⤵
        
        PID:7172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        221⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        222⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        223⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        224⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        225⤵
        System Location Discovery: System Language Discovery
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        226⤵
        
        PID:7264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        227⤵
        System Location Discovery: System Language Discovery
        
        PID:7276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        228⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        229⤵
        
        PID:7308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        230⤵
        
        PID:7320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        231⤵
        
        PID:7336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        232⤵
        System Location Discovery: System Language Discovery
        
        PID:7352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        233⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        234⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        235⤵
        
        PID:7392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        236⤵
        System Location Discovery: System Language Discovery
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        237⤵
        System Location Discovery: System Language Discovery
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        238⤵
        
        PID:7432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        239⤵
        System Location Discovery: System Language Discovery
        
        PID:7448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        240⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        241⤵
        System Location Discovery: System Language Discovery
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        242⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        243⤵
        System Location Discovery: System Language Discovery
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        244⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        245⤵
        
        PID:7532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        246⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        247⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        248⤵
        
        PID:7568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        249⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        250⤵
        System Location Discovery: System Language Discovery
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        251⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        252⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        253⤵
        
        PID:7648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        254⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        255⤵
        
        PID:7672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        256⤵
        
        PID:7688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        257⤵
        
        PID:7704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        258⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        259⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        260⤵
        System Location Discovery: System Language Discovery
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        261⤵
        System Location Discovery: System Language Discovery
        
        PID:7764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        262⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        263⤵
        System Location Discovery: System Language Discovery
        
        PID:7796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        264⤵
        
        PID:7836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        265⤵
        System Location Discovery: System Language Discovery
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        266⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        267⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        268⤵
        
        PID:7936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        269⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        270⤵
        System Location Discovery: System Language Discovery
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        271⤵
        
        PID:7996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        272⤵
        
        PID:8012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        273⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        274⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        275⤵
        
        PID:8088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        276⤵
        
        PID:8100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        277⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        278⤵
        System Location Discovery: System Language Discovery
        
        PID:8132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        279⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        280⤵
        
        PID:8156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        281⤵
        
        PID:8180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        282⤵
        System Location Discovery: System Language Discovery
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        283⤵
        
        PID:4700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        284⤵
        System Location Discovery: System Language Discovery
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        285⤵
        
        PID:2532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        286⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        287⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        288⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        289⤵
        
        PID:8076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        290⤵
        
        PID:7864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        291⤵
        System Location Discovery: System Language Discovery
        
        PID:8036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        292⤵
        System Location Discovery: System Language Discovery
        
        PID:8208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        293⤵
        System Location Discovery: System Language Discovery
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        294⤵
        
        PID:8240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        295⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        296⤵
        
        PID:8264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        297⤵
        
        PID:8276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        298⤵
        
        PID:8296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        299⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        300⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        301⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        302⤵
        
        PID:8384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        303⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        304⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        305⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        306⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        307⤵
        System Location Discovery: System Language Discovery
        
        PID:8452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        308⤵
        
        PID:8468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        309⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        310⤵
        System Location Discovery: System Language Discovery
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        311⤵
        System Location Discovery: System Language Discovery
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        312⤵
        
        PID:8528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        313⤵
        
        PID:8544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        314⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        315⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        316⤵
        
        PID:8600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        317⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        318⤵
        
        PID:8644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        319⤵
        
        PID:8656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        320⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        321⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        322⤵
        
        PID:8700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        323⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        324⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        325⤵
        
        PID:8740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        326⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        327⤵
        
        PID:8772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        328⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        329⤵
        
        PID:8816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        330⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        331⤵
        
        PID:8844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        332⤵
        
        PID:8860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        333⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        334⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        335⤵
        
        PID:8908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        336⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        337⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        338⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        339⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        340⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        341⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        342⤵
        
        PID:9000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        343⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        344⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        345⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        346⤵
        
        PID:9076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        347⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        348⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        349⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        350⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        351⤵
        
        PID:9152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        352⤵
        
        PID:9168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        353⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        354⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        355⤵
        
        PID:9204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        356⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        357⤵
        
        PID:3344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        358⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        359⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        360⤵
        
        PID:8780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        361⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        362⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        363⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        364⤵
        
        PID:9036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        365⤵
        
        PID:9224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        366⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        367⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        368⤵
        
        PID:9268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        369⤵
        
        PID:9280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        370⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        371⤵
        
        PID:9320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        372⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        373⤵
        
        PID:9348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        374⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        375⤵
        
        PID:9380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        376⤵
        
        PID:9396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        377⤵
        
        PID:9412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        378⤵
        
        PID:9428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        379⤵
        
        PID:9448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        380⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        381⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        382⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        383⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        384⤵
        
        PID:9588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        385⤵
        
        PID:9604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        386⤵
        
        PID:9616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        387⤵
        
        PID:9636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        388⤵
        
        PID:9652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        389⤵
        
        PID:9668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        390⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        391⤵
        
        PID:9700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        392⤵
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        393⤵
        
        PID:9728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        394⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        395⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        396⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        397⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        398⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        399⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        400⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        401⤵
        
        PID:9852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        402⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        403⤵
        
        PID:9876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        404⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        405⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        406⤵
        
        PID:9924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        407⤵
        
        PID:9940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        408⤵
        
        PID:9956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        409⤵
        
        PID:9972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        410⤵
        
        PID:9992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        411⤵
        
        PID:10004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        412⤵
        
        PID:10020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        413⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        414⤵
        
        PID:10052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        415⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        416⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        417⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        418⤵
        
        PID:10112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        419⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        420⤵
        
        PID:10144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        421⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        422⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        423⤵
        
        PID:10192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        424⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        425⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        426⤵
        
        PID:8336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        427⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        428⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        429⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        430⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        431⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        432⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        433⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        434⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        435⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        436⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        437⤵
        
        PID:10336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        438⤵
        
        PID:10348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        439⤵
        
        PID:10364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        440⤵
        
        PID:10380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        441⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        442⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        443⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        444⤵
        
        PID:10432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        445⤵
        
        PID:10444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        446⤵
        
        PID:10460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        447⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        448⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        449⤵
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        450⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        451⤵
        
        PID:10536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        452⤵
        
        PID:10552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        453⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        454⤵
        
        PID:10584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        455⤵
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        456⤵
        
        PID:10616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        457⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        458⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        459⤵
        
        PID:10660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        460⤵
        
        PID:10672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        461⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        462⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        463⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        464⤵
        
        PID:10768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        465⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        466⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        467⤵
        
        PID:10872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        468⤵
        
        PID:10888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        469⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        470⤵
        
        PID:10916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        471⤵
        
        PID:10932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        472⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        473⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        474⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        475⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        476⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        477⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        478⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        479⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        480⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        481⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        482⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        483⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        484⤵
        
        PID:11136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        485⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        486⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        487⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        488⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        489⤵
        
        PID:11216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        490⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        491⤵
        
        PID:11244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        492⤵
        
        PID:11260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        493⤵
        
        PID:10844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        494⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        495⤵
        
        PID:7884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        496⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        497⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        498⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        499⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        500⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        501⤵
        
        PID:11340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        502⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        503⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        504⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        505⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        506⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        507⤵
        
        PID:11432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        508⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        509⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        510⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        511⤵
        
        PID:11492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        512⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        513⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        514⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        515⤵
        
        PID:11548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        516⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        517⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        518⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        519⤵
        
        PID:11680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        520⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        521⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        522⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        523⤵
        
        PID:11756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        524⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        525⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        526⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        527⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        528⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        529⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        530⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        531⤵
        
        PID:11928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        532⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        533⤵
        
        PID:11960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        534⤵
        
        PID:11972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        535⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        536⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        537⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        538⤵
        
        PID:12036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        539⤵
        
        PID:12048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        540⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        541⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        542⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        543⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        544⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        545⤵
        
        PID:12144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        546⤵
        
        PID:12160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        547⤵
        
        PID:12180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        548⤵
        
        PID:12196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        549⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        550⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        551⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        552⤵
        
        PID:12256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        553⤵
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        554⤵
        
        PID:6796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        555⤵
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        556⤵
        
        PID:11788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        557⤵
        
        PID:1056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        558⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        559⤵
        
        PID:764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        560⤵
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        561⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        562⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        563⤵
        
        PID:12332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        564⤵
        
        PID:12348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        565⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        566⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        567⤵
        
        PID:12400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        568⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        569⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        570⤵
        
        PID:12448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        571⤵
        
        PID:12464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        572⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        573⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        574⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        575⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        576⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        577⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        578⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        579⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        580⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        581⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        582⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        583⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        584⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        585⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        586⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        587⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        588⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        589⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        590⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        591⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        592⤵
        
        PID:12796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        593⤵
        
        PID:12812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        594⤵
        
        PID:12828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        595⤵
        
        PID:12840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        596⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        597⤵
        
        PID:12868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        598⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        599⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        600⤵
        
        PID:12908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        601⤵
        
        PID:12924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        602⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        603⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        604⤵
        
        PID:12960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        605⤵
        
        PID:12972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        606⤵
        
        PID:12984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        607⤵
        
        PID:12996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        608⤵
        
        PID:13008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        609⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        610⤵
        
        PID:13036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        611⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        612⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        613⤵
        
        PID:13080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        614⤵
        
        PID:13096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        615⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        616⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        617⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        618⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        619⤵
        
        PID:13176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        620⤵
        
        PID:13192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        621⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        622⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        623⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        624⤵
        
        PID:13248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        625⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        626⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        627⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        628⤵
        
        PID:13296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        629⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        630⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        631⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        632⤵
        
        PID:13332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        633⤵
        
        PID:13344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        634⤵
        
        PID:13356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        635⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        636⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        637⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        638⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        639⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        640⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        641⤵
        
        PID:13472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        642⤵
        
        PID:13488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        643⤵
        
        PID:13504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        644⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        645⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        646⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        647⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        648⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        649⤵
        
        PID:13580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        650⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        651⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        652⤵
        
        PID:13616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        653⤵
        
        PID:13628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        654⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        655⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        656⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        657⤵
        
        PID:13684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        658⤵
        
        PID:13700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        659⤵
        
        PID:13716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        660⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        661⤵
        
        PID:13752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        662⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        663⤵
        
        PID:13784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        664⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        665⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        666⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        667⤵
        
        PID:13848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        668⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        669⤵
        
        PID:13880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        670⤵
        
        PID:13896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        671⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        672⤵
        
        PID:13936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        673⤵
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        674⤵
        
        PID:13964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        675⤵
        
        PID:13980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        676⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        677⤵
        
        PID:14008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        678⤵
        
        PID:14028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        679⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        680⤵
        
        PID:14060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        681⤵
        
        PID:14072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        682⤵
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        683⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        684⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        685⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        686⤵
        
        PID:14152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        687⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        688⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        689⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        690⤵
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        691⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        692⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        693⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        694⤵
        
        PID:14268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        695⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        696⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        697⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        698⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        699⤵
        
        PID:14344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        700⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        701⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        702⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        703⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        704⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        705⤵
        
        PID:14432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        706⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        707⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        708⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        709⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        710⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        711⤵
        
        PID:14520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        712⤵
        
        PID:14532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        713⤵
        
        PID:14548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        714⤵
        
        PID:14564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        715⤵
        
        PID:14580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        716⤵
        
        PID:14596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        717⤵
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        718⤵
        
        PID:14624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        719⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        720⤵
        
        PID:14656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        721⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        722⤵
        
        PID:14688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        723⤵
        
        PID:14704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        724⤵
        
        PID:14720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        725⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        726⤵
        
        PID:14752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        727⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        728⤵
        
        PID:14780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        729⤵
        
        PID:14796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        730⤵
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        731⤵
        
        PID:14844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        732⤵
        
        PID:14860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        733⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        734⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        735⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        736⤵
        
        PID:14924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        737⤵
        
        PID:14940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        738⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        739⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        740⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        741⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        742⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        743⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        744⤵
        
        PID:15052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        745⤵
        
        PID:15068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        746⤵
        
        PID:15084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        747⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        748⤵
        
        PID:15116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        749⤵
        
        PID:15132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        750⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        751⤵
        
        PID:15164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        752⤵
        
        PID:15180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        753⤵
        
        PID:15196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        754⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        755⤵
        
        PID:15228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        756⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        757⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        758⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        759⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        760⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        761⤵
        
        PID:15324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        762⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        763⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        764⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        765⤵
        
        PID:1984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        766⤵
        
        PID:15368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        767⤵
        
        PID:15384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        768⤵
        
        PID:15400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        769⤵
        
        PID:15416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        770⤵
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        771⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        772⤵
        
        PID:15456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        773⤵
        
        PID:15472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        774⤵
        
        PID:15488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        775⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        776⤵
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        777⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        778⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        779⤵
        
        PID:15564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        780⤵
        
        PID:15580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        781⤵
        
        PID:15596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        782⤵
        
        PID:15612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        783⤵
        
        PID:15628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        784⤵
        
        PID:15644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        785⤵
        
        PID:15660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        786⤵
        
        PID:15672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        787⤵
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        788⤵
        
        PID:15696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        789⤵
        
        PID:15716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        790⤵
        
        PID:15732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        791⤵
        
        PID:15748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        792⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        793⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        794⤵
        
        PID:15792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        795⤵
        
        PID:15808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        796⤵
        
        PID:15820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        797⤵
        
        PID:15836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        798⤵
        
        PID:15848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        799⤵
        
        PID:15860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        800⤵
        
        PID:15876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        801⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        802⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        803⤵
        
        PID:15916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        804⤵
        
        PID:15932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        805⤵
        
        PID:15944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        806⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        807⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        808⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        809⤵
        
        PID:15996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        810⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        811⤵
        
        PID:16020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        812⤵
        
        PID:16032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        813⤵
        
        PID:16044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        814⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        815⤵
        
        PID:16068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        816⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        817⤵
        
        PID:16096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        818⤵
        
        PID:16108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        819⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        820⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        821⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        822⤵
        
        PID:16160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        823⤵
        
        PID:16172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        824⤵
        
        PID:16184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        825⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        826⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        827⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        828⤵
        
        PID:16232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        829⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        830⤵
        
        PID:16256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        831⤵
        
        PID:16268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        832⤵
        
        PID:16280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        833⤵
        
        PID:16292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        834⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        835⤵
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        836⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        837⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        838⤵
        
        PID:16352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        839⤵
        
        PID:16364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        840⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        841⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        842⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        843⤵
        
        PID:16388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        844⤵
        
        PID:16404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        845⤵
        
        PID:16420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        846⤵
        
        PID:16436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        847⤵
        
        PID:16448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        848⤵
        
        PID:16460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        849⤵
        
        PID:16476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        850⤵
        
        PID:16492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        851⤵
        
        PID:16508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        852⤵
        
        PID:16524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        853⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        854⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        855⤵
        
        PID:16572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        856⤵
        
        PID:16588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        857⤵
        
        PID:16604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        858⤵
        
        PID:16620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        859⤵
        
        PID:16636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        860⤵
        
        PID:16652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\28da4801058a39633e0a4155f98565cc69e38264f500a0b80a9f231a1f680f4f.dll,#1
        861⤵
        
        PID:16668

C:\Windows\system32\BackgroundTaskHost.exe
"C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
1⤵
PID:5576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/16604-1-0x0000000074B50000-0x0000000074DD4000-memory.dmp

Download

memory/16620-0-0x0000000074B50000-0x0000000074DD4000-memory.dmp