1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 13:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll
Size 192KB
Sample260809-q6b2rayfmd
SHA256 1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1
MD5 5dd14cb89dda412b5b4ac988f4a4e811
SHA1 2cba1370281ec7e68b8dbf0d7a93b8b774d0fcb8
SHA512 fc8e103adefdc685de82f7ba9fdbc137e15da8b061e0f60a5ab6bf46056bdc34bb8255d377daa4af2fb15bab839ed2407eee542d0e1b1c357c514ca8a31e0d20
SSDEEP 3072:qRguYK0fUzzouXSlJPtFjpoYNvRz7zvCtU477voFRguYK0fUzzouXSlJPt:unoKzouXSPtFVoY7/zfkvUnoKzouXSPt
TLSH
T1B1149D02FB4688F1CC6D4430485FF67F5269E5688265CE63EF1ACB967FD3660B932224
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 2124	2340	rundll32.exe	84
PID 2124 wrote to memory of 3360	2124	rundll32.exe	85
PID 3360 wrote to memory of 2580	3360	rundll32.exe	86
PID 2580 wrote to memory of 3948	2580	rundll32.exe	87
PID 3948 wrote to memory of 3036	3948	rundll32.exe	88
PID 3036 wrote to memory of 968	3036	rundll32.exe	89
PID 968 wrote to memory of 832	968	rundll32.exe	90
PID 832 wrote to memory of 3592	832	rundll32.exe	91
PID 3592 wrote to memory of 4452	3592	rundll32.exe	92
PID 4452 wrote to memory of 2988	4452	rundll32.exe	93
PID 2988 wrote to memory of 3176	2988	rundll32.exe	94
PID 3176 wrote to memory of 4380	3176	rundll32.exe	95
PID 4380 wrote to memory of 5016	4380	rundll32.exe	96
PID 5016 wrote to memory of 1424	5016	rundll32.exe	97
PID 1424 wrote to memory of 3028	1424	rundll32.exe	98
PID 3028 wrote to memory of 2588	3028	rundll32.exe	99
PID 2588 wrote to memory of 4544	2588	rundll32.exe	100
PID 4544 wrote to memory of 1192	4544	rundll32.exe	101
PID 1192 wrote to memory of 4028	1192	rundll32.exe	102
PID 4028 wrote to memory of 2148	4028	rundll32.exe	103
PID 2148 wrote to memory of 1228	2148	rundll32.exe	104
PID 1228 wrote to memory of 4508	1228	rundll32.exe	105
PID 4508 wrote to memory of 1524	4508	rundll32.exe	106
PID 1524 wrote to memory of 2492	1524	rundll32.exe	107
PID 2492 wrote to memory of 2272	2492	rundll32.exe	108
PID 2272 wrote to memory of 4620	2272	rundll32.exe	109
PID 4620 wrote to memory of 1984	4620	rundll32.exe	110
PID 1984 wrote to memory of 1912	1984	rundll32.exe	111
PID 1912 wrote to memory of 2788	1912	rundll32.exe	112
PID 2788 wrote to memory of 1976	2788	rundll32.exe	113
PID 1976 wrote to memory of 2252	1976	rundll32.exe	114
PID 2252 wrote to memory of 700	2252	rundll32.exe	115
PID 700 wrote to memory of 4356	700	rundll32.exe	116
PID 4356 wrote to memory of 3488	4356	rundll32.exe	117
PID 3488 wrote to memory of 1888	3488	rundll32.exe	118
PID 1888 wrote to memory of 2484	1888	rundll32.exe	119
PID 2484 wrote to memory of 2592	2484	rundll32.exe	120
PID 2592 wrote to memory of 1576	2592	rundll32.exe	121
PID 1576 wrote to memory of 5092	1576	rundll32.exe	122
PID 5092 wrote to memory of 1728	5092	rundll32.exe	123
PID 1728 wrote to memory of 3804	1728	rundll32.exe	124
PID 3804 wrote to memory of 368	3804	rundll32.exe	125
PID 368 wrote to memory of 4540	368	rundll32.exe	126
PID 4540 wrote to memory of 3984	4540	rundll32.exe	127
PID 3984 wrote to memory of 2024	3984	rundll32.exe	128
PID 2024 wrote to memory of 4964	2024	rundll32.exe	129
PID 4964 wrote to memory of 2076	4964	rundll32.exe	130
PID 2076 wrote to memory of 4044	2076	rundll32.exe	131
PID 4044 wrote to memory of 4900	4044	rundll32.exe	132
PID 4900 wrote to memory of 4984	4900	rundll32.exe	133
PID 4984 wrote to memory of 3364	4984	rundll32.exe	134
PID 3364 wrote to memory of 3128	3364	rundll32.exe	135
PID 3128 wrote to memory of 2156	3128	rundll32.exe	136
PID 2156 wrote to memory of 4200	2156	rundll32.exe	137
PID 4200 wrote to memory of 3752	4200	rundll32.exe	138
PID 3752 wrote to memory of 4860	3752	rundll32.exe	139
PID 4860 wrote to memory of 1584	4860	rundll32.exe	140
PID 1584 wrote to memory of 3276	1584	rundll32.exe	141
PID 3276 wrote to memory of 3384	3276	rundll32.exe	142
PID 3384 wrote to memory of 2652	3384	rundll32.exe	143
PID 2652 wrote to memory of 3116	2652	rundll32.exe	144
PID 3116 wrote to memory of 1396	3116	rundll32.exe	145
PID 1396 wrote to memory of 2692	1396	rundll32.exe	146
PID 2692 wrote to memory of 228	2692	rundll32.exe	147

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2124
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3360
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2580
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3948
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:3592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:2988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        12⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:5016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:1424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:2588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        23⤵
        Suspicious use of WriteProcessMemory
        
        PID:4508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:1524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        25⤵
        Suspicious use of WriteProcessMemory
        
        PID:2492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:2272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:4620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:1984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        29⤵
        Suspicious use of WriteProcessMemory
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        30⤵
        Suspicious use of WriteProcessMemory
        
        PID:2788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:1976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        32⤵
        Suspicious use of WriteProcessMemory
        
        PID:2252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:3488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        36⤵
        Suspicious use of WriteProcessMemory
        
        PID:1888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:2484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:2592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:1576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:5092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:1728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        42⤵
        Suspicious use of WriteProcessMemory
        
        PID:3804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:4540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        45⤵
        Suspicious use of WriteProcessMemory
        
        PID:3984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        46⤵
        Suspicious use of WriteProcessMemory
        
        PID:2024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        47⤵
        Suspicious use of WriteProcessMemory
        
        PID:4964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:2076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:4044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:4900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:4984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        52⤵
        Suspicious use of WriteProcessMemory
        
        PID:3364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:3128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:2156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:4200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        56⤵
        Suspicious use of WriteProcessMemory
        
        PID:3752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:4860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:1584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        59⤵
        Suspicious use of WriteProcessMemory
        
        PID:3276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:3384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:2652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:3116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:1396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:2692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        65⤵
        
        PID:228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        66⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        67⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        68⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        69⤵
        
        PID:3968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        70⤵
        
        PID:620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        71⤵
        
        PID:2444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        72⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        73⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        74⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        75⤵
        
        PID:380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        76⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        77⤵
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        78⤵
        
        PID:1292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        79⤵
        System Location Discovery: System Language Discovery
        
        PID:680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        80⤵
        
        PID:548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        81⤵
        
        PID:748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        82⤵
        
        PID:2912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        83⤵
        
        PID:900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        84⤵
        
        PID:3336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        85⤵
        System Location Discovery: System Language Discovery
        
        PID:4928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        86⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        87⤵
        
        PID:2980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        88⤵
        
        PID:1076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        89⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        90⤵
        
        PID:3996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        91⤵
        System Location Discovery: System Language Discovery
        
        PID:1332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        92⤵
        
        PID:2984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        93⤵
        
        PID:4908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        94⤵
        
        PID:3288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        95⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        96⤵
        
        PID:4080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        97⤵
        System Location Discovery: System Language Discovery
        
        PID:4612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        98⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        99⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        100⤵
        
        PID:4216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        101⤵
        
        PID:2560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        102⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        103⤵
        System Location Discovery: System Language Discovery
        
        PID:2620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        104⤵
        
        PID:4664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        105⤵
        
        PID:4904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        106⤵
        
        PID:1088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        107⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        108⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        109⤵
        
        PID:4980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        110⤵
        
        PID:1016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        111⤵
        
        PID:2852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        112⤵
        
        PID:5044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        113⤵
        
        PID:2728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        114⤵
        
        PID:3556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        115⤵
        
        PID:3252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        116⤵
        
        PID:4180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        117⤵
        
        PID:4288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        118⤵
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        119⤵
        
        PID:632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        120⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        121⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        122⤵
        System Location Discovery: System Language Discovery
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        123⤵
        System Location Discovery: System Language Discovery
        
        PID:5140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        124⤵
        
        PID:5156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        125⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        126⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        127⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        128⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        129⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        130⤵
        
        PID:5236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        131⤵
        
        PID:5252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        132⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        133⤵
        
        PID:5284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        134⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        135⤵
        
        PID:5320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        136⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        137⤵
        
        PID:5348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        138⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        139⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        140⤵
        
        PID:5400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        141⤵
        
        PID:5416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        142⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        143⤵
        System Location Discovery: System Language Discovery
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        144⤵
        
        PID:5464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        145⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        146⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        147⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        148⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        149⤵
        
        PID:5544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        150⤵
        
        PID:5560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        151⤵
        
        PID:5576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        152⤵
        
        PID:5592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        153⤵
        
        PID:5604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        154⤵
        
        PID:5620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        155⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        156⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        157⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        158⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        159⤵
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        160⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        161⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        162⤵
        
        PID:5748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        163⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        164⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        165⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        166⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        167⤵
        
        PID:5832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        168⤵
        System Location Discovery: System Language Discovery
        
        PID:5848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        169⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        170⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        171⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        172⤵
        
        PID:5908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        173⤵
        System Location Discovery: System Language Discovery
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        174⤵
        
        PID:5940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        175⤵
        
        PID:5952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        176⤵
        
        PID:5968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        177⤵
        
        PID:5984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        178⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        179⤵
        
        PID:6016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        180⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        181⤵
        
        PID:6048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        182⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        183⤵
        System Location Discovery: System Language Discovery
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        184⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        185⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        186⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        187⤵
        
        PID:876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        188⤵
        
        PID:6156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        189⤵
        
        PID:6172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        190⤵
        
        PID:6188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        191⤵
        
        PID:6204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        192⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        193⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        194⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        195⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        196⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        197⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        198⤵
        
        PID:6316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        199⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        200⤵
        
        PID:6348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        201⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        202⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        203⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        204⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        205⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        206⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        207⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        208⤵
        
        PID:6472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        209⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        210⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        211⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        212⤵
        
        PID:6528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        213⤵
        
        PID:6540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        214⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        215⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        216⤵
        
        PID:6588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        217⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        218⤵
        
        PID:6620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        219⤵
        
        PID:6640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        220⤵
        
        PID:6656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        221⤵
        
        PID:6668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        222⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        223⤵
        
        PID:6704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        224⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        225⤵
        
        PID:6736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        226⤵
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        227⤵
        
        PID:6764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        228⤵
        
        PID:6784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        229⤵
        
        PID:6796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        230⤵
        
        PID:6812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        231⤵
        
        PID:6828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        232⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        233⤵
        
        PID:6860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        234⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        235⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        236⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        237⤵
        System Location Discovery: System Language Discovery
        
        PID:6924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        238⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        239⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        240⤵
        
        PID:6968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        241⤵
        System Location Discovery: System Language Discovery
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        242⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        243⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        244⤵
        
        PID:7032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        245⤵
        
        PID:7048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        246⤵
        System Location Discovery: System Language Discovery
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        247⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        248⤵
        
        PID:7088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        249⤵
        
        PID:7104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        250⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        251⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        252⤵
        
        PID:7152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        253⤵
        
        PID:3148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        254⤵
        
        PID:7180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        255⤵
        
        PID:7196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        256⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        257⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        258⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        259⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        260⤵
        
        PID:7272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        261⤵
        
        PID:7288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        262⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        263⤵
        
        PID:7320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        264⤵
        
        PID:7336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        265⤵
        
        PID:7352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        266⤵
        
        PID:7372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        267⤵
        
        PID:7388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        268⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        269⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        270⤵
        System Location Discovery: System Language Discovery
        
        PID:7432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        271⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        272⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        273⤵
        
        PID:7480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        274⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        275⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        276⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        277⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        278⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        279⤵
        
        PID:7564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        280⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        281⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        282⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        283⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        284⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        285⤵
        
        PID:7664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        286⤵
        
        PID:7676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        287⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        288⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        289⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        290⤵
        System Location Discovery: System Language Discovery
        
        PID:7740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        291⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        292⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        293⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        294⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        295⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        296⤵
        
        PID:7832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        297⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        298⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        299⤵
        
        PID:7880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        300⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        301⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        302⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        303⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        304⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        305⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        306⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        307⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        308⤵
        
        PID:8020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        309⤵
        System Location Discovery: System Language Discovery
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        310⤵
        
        PID:8044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        311⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        312⤵
        
        PID:8072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        313⤵
        
        PID:8084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        314⤵
        
        PID:8100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        315⤵
        
        PID:8120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        316⤵
        
        PID:8132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        317⤵
        
        PID:8148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        318⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        319⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        320⤵
        
        PID:1904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        321⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        322⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        323⤵
        
        PID:8232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        324⤵
        
        PID:8248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        325⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        326⤵
        
        PID:8280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        327⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        328⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        329⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        330⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        331⤵
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        332⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        333⤵
        System Location Discovery: System Language Discovery
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        334⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        335⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        336⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        337⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        338⤵
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        339⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        340⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        341⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        342⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        343⤵
        
        PID:8552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        344⤵
        
        PID:8568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        345⤵
        
        PID:8580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        346⤵
        
        PID:8592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        347⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        348⤵
        
        PID:8624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        349⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        350⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        351⤵
        
        PID:8668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        352⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        353⤵
        
        PID:8700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        354⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        355⤵
        
        PID:8732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        356⤵
        
        PID:8744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        357⤵
        
        PID:8764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        358⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        359⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        360⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        361⤵
        System Location Discovery: System Language Discovery
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        362⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        363⤵
        System Location Discovery: System Language Discovery
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        364⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        365⤵
        
        PID:8892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        366⤵
        
        PID:8904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        367⤵
        
        PID:8920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        368⤵
        
        PID:8940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        369⤵
        
        PID:8956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        370⤵
        
        PID:8968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        371⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        372⤵
        
        PID:9000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        373⤵
        
        PID:9016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        374⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        375⤵
        
        PID:9052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        376⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        377⤵
        
        PID:9080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        378⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        379⤵
        
        PID:9112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        380⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        381⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        382⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        383⤵
        
        PID:9176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        384⤵
        
        PID:9196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        385⤵
        
        PID:9212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        386⤵
        
        PID:9224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        387⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        388⤵
        
        PID:9256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        389⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        390⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        391⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        392⤵
        
        PID:9320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        393⤵
        
        PID:9336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        394⤵
        
        PID:9348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        395⤵
        System Location Discovery: System Language Discovery
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        396⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        397⤵
        
        PID:9388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        398⤵
        
        PID:9400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        399⤵
        
        PID:9416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        400⤵
        
        PID:9432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        401⤵
        
        PID:9448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        402⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        403⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        404⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        405⤵
        System Location Discovery: System Language Discovery
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        406⤵
        
        PID:9528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        407⤵
        
        PID:9544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        408⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        409⤵
        
        PID:9576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        410⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        411⤵
        
        PID:9608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        412⤵
        System Location Discovery: System Language Discovery
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        413⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        414⤵
        
        PID:9656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        415⤵
        
        PID:9672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        416⤵
        
        PID:9688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        417⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        418⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        419⤵
        
        PID:9736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        420⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        421⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        422⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        423⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        424⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        425⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        426⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        427⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        428⤵
        
        PID:9872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        429⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        430⤵
        
        PID:9904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        431⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        432⤵
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        433⤵
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        434⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        435⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        436⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        437⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        438⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        439⤵
        
        PID:10044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        440⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        441⤵
        
        PID:10084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        442⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        443⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        444⤵
        
        PID:10132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        445⤵
        
        PID:10148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        446⤵
        
        PID:10160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        447⤵
        
        PID:10172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        448⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        449⤵
        
        PID:10196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        450⤵
        System Location Discovery: System Language Discovery
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        451⤵
        
        PID:10220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        452⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        453⤵
        System Location Discovery: System Language Discovery
        
        PID:4332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        454⤵
        
        PID:10252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        455⤵
        
        PID:10264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        456⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        457⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        458⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        459⤵
        
        PID:10328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        460⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        461⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        462⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        463⤵
        System Location Discovery: System Language Discovery
        
        PID:10388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        464⤵
        
        PID:10404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        465⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        466⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        467⤵
        
        PID:10456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        468⤵
        
        PID:10472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        469⤵
        
        PID:10488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        470⤵
        System Location Discovery: System Language Discovery
        
        PID:10504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        471⤵
        
        PID:10520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        472⤵
        
        PID:10536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        473⤵
        
        PID:10556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        474⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        475⤵
        
        PID:10584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        476⤵
        System Location Discovery: System Language Discovery
        
        PID:10600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        477⤵
        
        PID:10620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        478⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        479⤵
        
        PID:10648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        480⤵
        
        PID:10664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        481⤵
        
        PID:10680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        482⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        483⤵
        
        PID:10712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        484⤵
        
        PID:10728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        485⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        486⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        487⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        488⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        489⤵
        
        PID:10808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        490⤵
        System Location Discovery: System Language Discovery
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        491⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        492⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        493⤵
        
        PID:10864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        494⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        495⤵
        
        PID:10892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        496⤵
        
        PID:10904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        497⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        498⤵
        System Location Discovery: System Language Discovery
        
        PID:10936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        499⤵
        
        PID:10948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        500⤵
        
        PID:10964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        501⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        502⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        503⤵
        
        PID:11012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        504⤵
        
        PID:11028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        505⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        506⤵
        System Location Discovery: System Language Discovery
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        507⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        508⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        509⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        510⤵
        
        PID:11124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        511⤵
        System Location Discovery: System Language Discovery
        
        PID:11140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        512⤵
        System Location Discovery: System Language Discovery
        
        PID:11156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        513⤵
        
        PID:11172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        514⤵
        
        PID:11188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        515⤵
        
        PID:11204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        516⤵
        
        PID:11220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        517⤵
        
        PID:11236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        518⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        519⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        520⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        521⤵
        System Location Discovery: System Language Discovery
        
        PID:11300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        522⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        523⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        524⤵
        
        PID:11348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        525⤵
        
        PID:11364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        526⤵
        
        PID:11380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        527⤵
        
        PID:11400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        528⤵
        
        PID:11412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        529⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        530⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        531⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        532⤵
        
        PID:11472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        533⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        534⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        535⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        536⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        537⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        538⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        539⤵
        
        PID:11572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        540⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        541⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        542⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        543⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        544⤵
        
        PID:11640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        545⤵
        
        PID:11656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        546⤵
        
        PID:11672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        547⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        548⤵
        
        PID:11704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        549⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        550⤵
        
        PID:11732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        551⤵
        
        PID:11748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        552⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        553⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        554⤵
        System Location Discovery: System Language Discovery
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        555⤵
        
        PID:11812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        556⤵
        
        PID:11824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        557⤵
        
        PID:11840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        558⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        559⤵
        
        PID:11872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        560⤵
        
        PID:11888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        561⤵
        
        PID:11904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        562⤵
        
        PID:11920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        563⤵
        
        PID:11936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        564⤵
        
        PID:11952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        565⤵
        
        PID:11968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        566⤵
        
        PID:11984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        567⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        568⤵
        
        PID:12020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        569⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        570⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        571⤵
        System Location Discovery: System Language Discovery
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        572⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        573⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        574⤵
        
        PID:12104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        575⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        576⤵
        
        PID:12132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        577⤵
        
        PID:12148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        578⤵
        
        PID:12164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        579⤵
        
        PID:12176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        580⤵
        
        PID:12204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        581⤵
        
        PID:12220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        582⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        583⤵
        System Location Discovery: System Language Discovery
        
        PID:12272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        584⤵
        
        PID:3880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        585⤵
        
        PID:3236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        586⤵
        
        PID:12316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        587⤵
        System Location Discovery: System Language Discovery
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        588⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        589⤵
        
        PID:12432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        590⤵
        System Location Discovery: System Language Discovery
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        591⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        592⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        593⤵
        
        PID:12516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        594⤵
        System Location Discovery: System Language Discovery
        
        PID:12532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        595⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        596⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        597⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        598⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        599⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        600⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        601⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        602⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        603⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        604⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        605⤵
        
        PID:12708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        606⤵
        
        PID:12724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        607⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        608⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        609⤵
        
        PID:12772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        610⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        611⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        612⤵
        System Location Discovery: System Language Discovery
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        613⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        614⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        615⤵
        
        PID:12868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        616⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        617⤵
        
        PID:12896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        618⤵
        System Location Discovery: System Language Discovery
        
        PID:12912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        619⤵
        
        PID:12928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        620⤵
        
        PID:12944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        621⤵
        
        PID:12960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        622⤵
        
        PID:12988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        623⤵
        
        PID:13004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        624⤵
        
        PID:13020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        625⤵
        
        PID:13036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        626⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        627⤵
        
        PID:13064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        628⤵
        
        PID:13080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        629⤵
        
        PID:13096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        630⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        631⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        632⤵
        
        PID:13140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        633⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        634⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        635⤵
        
        PID:13188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        636⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        637⤵
        
        PID:13220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        638⤵
        
        PID:13232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        639⤵
        System Location Discovery: System Language Discovery
        
        PID:13244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        640⤵
        
        PID:13260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        641⤵
        
        PID:13276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        642⤵
        
        PID:13292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        643⤵
        
        PID:13308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        644⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        645⤵
        
        PID:3860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        646⤵
        
        PID:3392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        647⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        648⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        649⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        650⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        651⤵
        
        PID:3960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        652⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        653⤵
        
        PID:12308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        654⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        655⤵
        
        PID:4832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        656⤵
        
        PID:2568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        657⤵
        
        PID:2392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        658⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        659⤵
        
        PID:4144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        660⤵
        
        PID:1812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        661⤵
        
        PID:3796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        662⤵
        
        PID:3344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        663⤵
        
        PID:3964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        664⤵
        
        PID:828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        665⤵
        System Location Discovery: System Language Discovery
        
        PID:2224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        666⤵
        System Location Discovery: System Language Discovery
        
        PID:4036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        667⤵
        
        PID:3748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        668⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        669⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        670⤵
        
        PID:3808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        671⤵
        
        PID:2536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        672⤵
        System Location Discovery: System Language Discovery
        
        PID:1916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        673⤵
        
        PID:220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        674⤵
        
        PID:3260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        675⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        676⤵
        
        PID:4016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        677⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        678⤵
        
        PID:1472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        679⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        680⤵
        
        PID:2204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        681⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        682⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        683⤵
        
        PID:2200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        684⤵
        
        PID:468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        685⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        686⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        687⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        688⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        689⤵
        
        PID:2112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        690⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        691⤵
        System Location Discovery: System Language Discovery
        
        PID:3952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        692⤵
        
        PID:1624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        693⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        694⤵
        
        PID:516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        695⤵
        
        PID:4772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        696⤵
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        697⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        698⤵
        System Location Discovery: System Language Discovery
        
        PID:4032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        699⤵
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        700⤵
        
        PID:13328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        701⤵
        
        PID:13344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        702⤵
        
        PID:13360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        703⤵
        
        PID:13376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        704⤵
        
        PID:13392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        705⤵
        
        PID:13404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        706⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        707⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        708⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        709⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        710⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        711⤵
        System Location Discovery: System Language Discovery
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        712⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        713⤵
        
        PID:13536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        714⤵
        
        PID:13552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        715⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        716⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        717⤵
        
        PID:13600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        718⤵
        
        PID:13616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        719⤵
        
        PID:13636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        720⤵
        
        PID:13648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        721⤵
        
        PID:13664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        722⤵
        System Location Discovery: System Language Discovery
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        723⤵
        
        PID:13696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        724⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        725⤵
        
        PID:13724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        726⤵
        
        PID:13740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        727⤵
        
        PID:13752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        728⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        729⤵
        
        PID:13784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        730⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        731⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        732⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        733⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        734⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        735⤵
        
        PID:13880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        736⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        737⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        738⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        739⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        740⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        741⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        742⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        743⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        744⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        745⤵
        
        PID:14040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        746⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        747⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        748⤵
        
        PID:14080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        749⤵
        
        PID:14096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        750⤵
        System Location Discovery: System Language Discovery
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        751⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        752⤵
        
        PID:14144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        753⤵
        
        PID:14160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        754⤵
        
        PID:14176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        755⤵
        
        PID:14192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        756⤵
        System Location Discovery: System Language Discovery
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        757⤵
        
        PID:14224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        758⤵
        
        PID:14240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        759⤵
        
        PID:14256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        760⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        761⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        762⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        763⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        764⤵
        
        PID:2744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        765⤵
        
        PID:536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        766⤵
        
        PID:4576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        767⤵
        
        PID:5148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        768⤵
        
        PID:5180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        769⤵
        
        PID:3788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        770⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        771⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        772⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        773⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        774⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        775⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        776⤵
        
        PID:5432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        777⤵
        
        PID:5444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        778⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        779⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        780⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        781⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        782⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        783⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        784⤵
        
        PID:3976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        785⤵
        
        PID:5664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        786⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        787⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        788⤵
        
        PID:5744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        789⤵
        
        PID:5776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        790⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        791⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        792⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        793⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        794⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        795⤵
        System Location Discovery: System Language Discovery
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        796⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        797⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        798⤵
        System Location Discovery: System Language Discovery
        
        PID:6072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        799⤵
        
        PID:6092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        800⤵
        
        PID:6136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        801⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        802⤵
        
        PID:6168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        803⤵
        
        PID:6212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        804⤵
        
        PID:3496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        805⤵
        System Location Discovery: System Language Discovery
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        806⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        807⤵
        
        PID:6296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        808⤵
        
        PID:6328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        809⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        810⤵
        
        PID:6392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        811⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        812⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        813⤵
        
        PID:6508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        814⤵
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        815⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        816⤵
        
        PID:6604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        817⤵
        
        PID:6616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        818⤵
        
        PID:6648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        819⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        820⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        821⤵
        
        PID:6756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        822⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        823⤵
        
        PID:6808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        824⤵
        
        PID:6840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        825⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        826⤵
        System Location Discovery: System Language Discovery
        
        PID:6892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        827⤵
        
        PID:6904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        828⤵
        
        PID:6952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        829⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        830⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        831⤵
        System Location Discovery: System Language Discovery
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        832⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        833⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        834⤵
        
        PID:7112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        835⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        836⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        837⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        838⤵
        
        PID:7208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        839⤵
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        840⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        841⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        842⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        843⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        844⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        845⤵
        
        PID:7400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        846⤵
        
        PID:7440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        847⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        848⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        849⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        850⤵
        
        PID:10060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        851⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        852⤵
        
        PID:14352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        853⤵
        System Location Discovery: System Language Discovery
        
        PID:14364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        854⤵
        
        PID:14380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        855⤵
        
        PID:14396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        856⤵
        
        PID:14412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        857⤵
        
        PID:14424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        858⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        859⤵
        
        PID:14448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        860⤵
        
        PID:14464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        861⤵
        
        PID:14480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        862⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        863⤵
        
        PID:14508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        864⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        865⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        866⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        867⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        868⤵
        
        PID:14580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        869⤵
        
        PID:14596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        870⤵
        
        PID:14608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        871⤵
        
        PID:14628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        872⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        873⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        874⤵
        
        PID:14672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        875⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        876⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        877⤵
        System Location Discovery: System Language Discovery
        
        PID:14712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        878⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        879⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        880⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        881⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        882⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        883⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        884⤵
        
        PID:14812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        885⤵
        System Location Discovery: System Language Discovery
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        886⤵
        
        PID:14844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        887⤵
        System Location Discovery: System Language Discovery
        
        PID:14856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        888⤵
        System Location Discovery: System Language Discovery
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        889⤵
        
        PID:14888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        890⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        891⤵
        System Location Discovery: System Language Discovery
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        892⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        893⤵
        
        PID:14948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        894⤵
        
        PID:14960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        895⤵
        
        PID:14980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        896⤵
        
        PID:14996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        897⤵
        
        PID:15012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        898⤵
        
        PID:15028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        899⤵
        
        PID:15040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        900⤵
        
        PID:15056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        901⤵
        
        PID:15068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        902⤵
        
        PID:15084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\1f3796703db02bedf40c12e6215adc75ce89d675a3881d17bbd84bc0aec8bfc1.dll,#1
        903⤵
        
        PID:15100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2124-0-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/2148-143-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/2272-148-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/2580-126-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/2988-133-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/3028-138-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/3036-35-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/3360-125-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/3592-7-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/4452-132-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/4544-16-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

memory/4620-25-0x0000000074A00000-0x0000000074C84000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads