899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/09/2026, 16:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll
Size 172KB
Sample260903-vekl2acl2s
SHA256 899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3
MD5 c9f0b69c10ef42a69a28c91b7a986bfa
SHA1 dcf1a92cf8142593440ee23a2a2a431a01f9f515
SHA512 f4131dcfe05c7e8f88a6f38382b8e9b75e2f9d303ac4e4292e1aed78a11623d9e1745caf2b31caa9e36637a7ff278cbb3e004f30c1dffbbd5d3c9cc6893c25fc
SSDEEP 3072:AEavzhA5bSxWketJ9f2HFBqu57yZCa8l/zu11quix95PyYd6yaLRQNM9j:c0FwQu5Ll/zS4/7raVQNY
TLSH
T12D046C28EFB4C856E23C42349939C32C7B31BA055BE4CDDBDD909A885A3B9C4EE75705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4616 wrote to memory of 696	4616	rundll32.exe	86
PID 696 wrote to memory of 3408	696	rundll32.exe	87
PID 3408 wrote to memory of 1884	3408	rundll32.exe	88
PID 1884 wrote to memory of 3424	1884	rundll32.exe	89
PID 3424 wrote to memory of 2060	3424	rundll32.exe	90
PID 2060 wrote to memory of 4820	2060	rundll32.exe	91
PID 4820 wrote to memory of 4956	4820	rundll32.exe	92
PID 4956 wrote to memory of 1276	4956	rundll32.exe	93
PID 1276 wrote to memory of 3940	1276	rundll32.exe	94
PID 3940 wrote to memory of 4408	3940	rundll32.exe	95
PID 4408 wrote to memory of 2864	4408	rundll32.exe	96
PID 2864 wrote to memory of 4388	2864	rundll32.exe	97
PID 4388 wrote to memory of 3508	4388	rundll32.exe	98
PID 3508 wrote to memory of 5108	3508	rundll32.exe	99
PID 5108 wrote to memory of 1832	5108	rundll32.exe	100
PID 1832 wrote to memory of 4540	1832	rundll32.exe	101
PID 4540 wrote to memory of 3440	4540	rundll32.exe	102
PID 3440 wrote to memory of 3688	3440	rundll32.exe	103
PID 3688 wrote to memory of 1236	3688	rundll32.exe	104
PID 1236 wrote to memory of 8	1236	rundll32.exe	105
PID 8 wrote to memory of 4576	8	rundll32.exe	106
PID 4576 wrote to memory of 1788	4576	rundll32.exe	107
PID 1788 wrote to memory of 1800	1788	rundll32.exe	108
PID 1800 wrote to memory of 4304	1800	rundll32.exe	109
PID 4304 wrote to memory of 3360	4304	rundll32.exe	110
PID 3360 wrote to memory of 1728	3360	rundll32.exe	111
PID 1728 wrote to memory of 628	1728	rundll32.exe	112
PID 628 wrote to memory of 1052	628	rundll32.exe	113
PID 1052 wrote to memory of 3116	1052	rundll32.exe	114
PID 3116 wrote to memory of 3904	3116	rundll32.exe	115
PID 3904 wrote to memory of 1960	3904	rundll32.exe	116
PID 1960 wrote to memory of 4788	1960	rundll32.exe	117
PID 4788 wrote to memory of 3176	4788	rundll32.exe	118
PID 3176 wrote to memory of 4532	3176	rundll32.exe	119
PID 4532 wrote to memory of 564	4532	rundll32.exe	120
PID 564 wrote to memory of 3384	564	rundll32.exe	121
PID 3384 wrote to memory of 368	3384	rundll32.exe	122
PID 368 wrote to memory of 4652	368	rundll32.exe	123
PID 4652 wrote to memory of 1504	4652	rundll32.exe	124
PID 1504 wrote to memory of 4276	1504	rundll32.exe	125
PID 4276 wrote to memory of 624	4276	rundll32.exe	126
PID 624 wrote to memory of 3700	624	rundll32.exe	127
PID 3700 wrote to memory of 4992	3700	rundll32.exe	128
PID 4992 wrote to memory of 1292	4992	rundll32.exe	129
PID 1292 wrote to memory of 4296	1292	rundll32.exe	130
PID 4296 wrote to memory of 228	4296	rundll32.exe	131
PID 228 wrote to memory of 976	228	rundll32.exe	132
PID 976 wrote to memory of 812	976	rundll32.exe	133
PID 812 wrote to memory of 1748	812	rundll32.exe	134
PID 1748 wrote to memory of 4368	1748	rundll32.exe	135
PID 4368 wrote to memory of 3056	4368	rundll32.exe	137
PID 3056 wrote to memory of 3280	3056	rundll32.exe	138
PID 3280 wrote to memory of 4832	3280	rundll32.exe	139
PID 4832 wrote to memory of 408	4832	rundll32.exe	140
PID 408 wrote to memory of 1724	408	rundll32.exe	141
PID 1724 wrote to memory of 4940	1724	rundll32.exe	142
PID 4940 wrote to memory of 3196	4940	rundll32.exe	143
PID 3196 wrote to memory of 2448	3196	rundll32.exe	144
PID 2448 wrote to memory of 1376	2448	rundll32.exe	145
PID 1376 wrote to memory of 3292	1376	rundll32.exe	146
PID 3292 wrote to memory of 3356	3292	rundll32.exe	147
PID 3356 wrote to memory of 4048	3356	rundll32.exe	148
PID 4048 wrote to memory of 3132	4048	rundll32.exe	149
PID 3132 wrote to memory of 412	3132	rundll32.exe	150

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4616
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:696
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3408
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1884
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3424
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:4820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:3940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:3688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:1236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:8
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        22⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        23⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:1800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        25⤵
        Suspicious use of WriteProcessMemory
        
        PID:4304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:3360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:1728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        29⤵
        Suspicious use of WriteProcessMemory
        
        PID:1052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        30⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:3904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        32⤵
        Suspicious use of WriteProcessMemory
        
        PID:1960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:3176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:4532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        36⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:3384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:1504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:4276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        42⤵
        Suspicious use of WriteProcessMemory
        
        PID:624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:3700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:4992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        45⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        46⤵
        Suspicious use of WriteProcessMemory
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        47⤵
        Suspicious use of WriteProcessMemory
        
        PID:228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:1748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:4368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        52⤵
        Suspicious use of WriteProcessMemory
        
        PID:3056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:3280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:4832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        56⤵
        Suspicious use of WriteProcessMemory
        
        PID:1724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:4940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        59⤵
        Suspicious use of WriteProcessMemory
        
        PID:2448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:1376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:3292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:3356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:4048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:3132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        65⤵
        
        PID:412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        66⤵
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        67⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        68⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        69⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        70⤵
        
        PID:4120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        71⤵
        System Location Discovery: System Language Discovery
        
        PID:3036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        72⤵
        
        PID:3272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        73⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        74⤵
        
        PID:864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        75⤵
        
        PID:3236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        76⤵
        
        PID:2376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        77⤵
        
        PID:724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        78⤵
        
        PID:4184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        79⤵
        
        PID:2904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        80⤵
        
        PID:4728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        81⤵
        
        PID:2212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        82⤵
        
        PID:2648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        83⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        84⤵
        
        PID:3460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        85⤵
        
        PID:3600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        86⤵
        
        PID:4016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        87⤵
        
        PID:3664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        88⤵
        
        PID:1648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        89⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        90⤵
        
        PID:2152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        91⤵
        System Location Discovery: System Language Discovery
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        92⤵
        
        PID:4700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        93⤵
        
        PID:2336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        94⤵
        
        PID:440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        95⤵
        
        PID:4580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        96⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        97⤵
        
        PID:2160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        98⤵
        
        PID:3852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        99⤵
        System Location Discovery: System Language Discovery
        
        PID:740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        100⤵
        
        PID:2756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        101⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        102⤵
        
        PID:896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        103⤵
        System Location Discovery: System Language Discovery
        
        PID:1212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        104⤵
        System Location Discovery: System Language Discovery
        
        PID:3616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        105⤵
        
        PID:4936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        106⤵
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        107⤵
        
        PID:4892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        108⤵
        
        PID:4108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        109⤵
        System Location Discovery: System Language Discovery
        
        PID:1524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        110⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        111⤵
        
        PID:5144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        112⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        113⤵
        System Location Discovery: System Language Discovery
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        114⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        115⤵
        
        PID:5208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        116⤵
        
        PID:5224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        117⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        118⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        119⤵
        
        PID:5268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        120⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        121⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        122⤵
        
        PID:5312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        123⤵
        
        PID:5328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        124⤵
        
        PID:5344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        125⤵
        
        PID:5360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        126⤵
        
        PID:5376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        127⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        128⤵
        
        PID:5408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        129⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        130⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        131⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        132⤵
        System Location Discovery: System Language Discovery
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        133⤵
        System Location Discovery: System Language Discovery
        
        PID:5488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        134⤵
        
        PID:5504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        135⤵
        
        PID:5520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        136⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        137⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        138⤵
        
        PID:5568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        139⤵
        
        PID:5584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        140⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        141⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        142⤵
        System Location Discovery: System Language Discovery
        
        PID:5628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        143⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        144⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        145⤵
        
        PID:5672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        146⤵
        
        PID:5688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        147⤵
        
        PID:5704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        148⤵
        
        PID:5720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        149⤵
        
        PID:5736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        150⤵
        
        PID:5752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        151⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        152⤵
        
        PID:5780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        153⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        154⤵
        
        PID:5812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        155⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        156⤵
        
        PID:5844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        157⤵
        System Location Discovery: System Language Discovery
        
        PID:5856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        158⤵
        
        PID:5872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        159⤵
        
        PID:5884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        160⤵
        
        PID:5896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        161⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        162⤵
        
        PID:5924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        163⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        164⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        165⤵
        System Location Discovery: System Language Discovery
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        166⤵
        
        PID:5976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        167⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        168⤵
        System Location Discovery: System Language Discovery
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        169⤵
        
        PID:6016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        170⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        171⤵
        
        PID:6048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        172⤵
        
        PID:6064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        173⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        174⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        175⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        176⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        177⤵
        
        PID:436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        178⤵
        
        PID:716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        179⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        180⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        181⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        182⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        183⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        184⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        185⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        186⤵
        
        PID:6240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        187⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        188⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        189⤵
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        190⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        191⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        192⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        193⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        194⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        195⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        196⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        197⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        198⤵
        
        PID:6428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        199⤵
        
        PID:6444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        200⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        201⤵
        
        PID:6476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        202⤵
        
        PID:6492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        203⤵
        
        PID:6504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        204⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        205⤵
        
        PID:6532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        206⤵
        System Location Discovery: System Language Discovery
        
        PID:6548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        207⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        208⤵
        
        PID:6588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        209⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        210⤵
        
        PID:6620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        211⤵
        
        PID:6632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        212⤵
        
        PID:6648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        213⤵
        System Location Discovery: System Language Discovery
        
        PID:6664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        214⤵
        
        PID:6680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        215⤵
        
        PID:6696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        216⤵
        
        PID:6712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        217⤵
        
        PID:6728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        218⤵
        
        PID:6740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        219⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        220⤵
        
        PID:6764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        221⤵
        
        PID:6780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        222⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        223⤵
        
        PID:6812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        224⤵
        
        PID:6824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        225⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        226⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        227⤵
        
        PID:6868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        228⤵
        
        PID:6884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        229⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        230⤵
        
        PID:6916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        231⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        232⤵
        System Location Discovery: System Language Discovery
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        233⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        234⤵
        
        PID:6980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        235⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        236⤵
        System Location Discovery: System Language Discovery
        
        PID:7012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        237⤵
        
        PID:7028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        238⤵
        
        PID:7044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        239⤵
        
        PID:7060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        240⤵
        System Location Discovery: System Language Discovery
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        241⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        242⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        243⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        244⤵
        
        PID:7140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        245⤵
        
        PID:7156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        246⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        247⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        248⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        249⤵
        
        PID:7216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        250⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        251⤵
        System Location Discovery: System Language Discovery
        
        PID:7248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        252⤵
        
        PID:7264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        253⤵
        
        PID:7280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        254⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        255⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        256⤵
        
        PID:7328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        257⤵
        
        PID:7340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        258⤵
        
        PID:7356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        259⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        260⤵
        
        PID:7388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        261⤵
        
        PID:7404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        262⤵
        
        PID:7420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        263⤵
        
        PID:7432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        264⤵
        
        PID:7448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        265⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        266⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        267⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        268⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        269⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        270⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        271⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        272⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        273⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        274⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        275⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        276⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        277⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        278⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        279⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        280⤵
        
        PID:7676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        281⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        282⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        283⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        284⤵
        
        PID:7740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        285⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        286⤵
        
        PID:7768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        287⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        288⤵
        
        PID:7800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        289⤵
        
        PID:7816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        290⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        291⤵
        
        PID:7844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        292⤵
        System Location Discovery: System Language Discovery
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        293⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        294⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        295⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        296⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        297⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        298⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        299⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        300⤵
        
        PID:7988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        301⤵
        
        PID:8004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        302⤵
        
        PID:8020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        303⤵
        
        PID:8036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        304⤵
        
        PID:8052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        305⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        306⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        307⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        308⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        309⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        310⤵
        
        PID:8136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        311⤵
        
        PID:8148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        312⤵
        
        PID:8164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        313⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        314⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        315⤵
        
        PID:8208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        316⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        317⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        318⤵
        
        PID:8248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        319⤵
        
        PID:8264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        320⤵
        
        PID:8276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        321⤵
        
        PID:8292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        322⤵
        
        PID:8304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        323⤵
        
        PID:8316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        324⤵
        
        PID:8332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        325⤵
        
        PID:8348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        326⤵
        
        PID:8364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        327⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        328⤵
        System Location Discovery: System Language Discovery
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        329⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        330⤵
        
        PID:8428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        331⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        332⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        333⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        334⤵
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        335⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        336⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        337⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        338⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        339⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        340⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        341⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        342⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        343⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        344⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        345⤵
        
        PID:8668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        346⤵
        
        PID:8684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        347⤵
        
        PID:8700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        348⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        349⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        350⤵
        
        PID:8752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        351⤵
        
        PID:8768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        352⤵
        System Location Discovery: System Language Discovery
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        353⤵
        
        PID:8800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        354⤵
        
        PID:8816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        355⤵
        
        PID:8836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        356⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        357⤵
        
        PID:8864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        358⤵
        
        PID:8880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        359⤵
        
        PID:8896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        360⤵
        
        PID:8912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        361⤵
        
        PID:8928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        362⤵
        
        PID:8944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        363⤵
        
        PID:8960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        364⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        365⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        366⤵
        System Location Discovery: System Language Discovery
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        367⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        368⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        369⤵
        
        PID:9044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        370⤵
        
        PID:9056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        371⤵
        
        PID:9072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        372⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        373⤵
        
        PID:9100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        374⤵
        
        PID:9116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        375⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        376⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        377⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        378⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        379⤵
        
        PID:9188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        380⤵
        
        PID:9204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        381⤵
        
        PID:9228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        382⤵
        
        PID:9240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        383⤵
        
        PID:9272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        384⤵
        
        PID:9304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        385⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        386⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        387⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        388⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        389⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        390⤵
        
        PID:9408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        391⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        392⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        393⤵
        System Location Discovery: System Language Discovery
        
        PID:9456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        394⤵
        
        PID:9468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        395⤵
        
        PID:9484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        396⤵
        
        PID:9504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        397⤵
        
        PID:9516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        398⤵
        
        PID:9532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        399⤵
        
        PID:9548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        400⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        401⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        402⤵
        
        PID:9596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        403⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        404⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        405⤵
        
        PID:9644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        406⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        407⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        408⤵
        
        PID:9696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        409⤵
        
        PID:9712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        410⤵
        
        PID:9744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        411⤵
        System Location Discovery: System Language Discovery
        
        PID:9760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        412⤵
        
        PID:9784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        413⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        414⤵
        
        PID:9828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        415⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        416⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        417⤵
        
        PID:9912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        418⤵
        System Location Discovery: System Language Discovery
        
        PID:9932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        419⤵
        System Location Discovery: System Language Discovery
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        420⤵
        
        PID:10008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        421⤵
        
        PID:10068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        422⤵
        
        PID:10084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        423⤵
        
        PID:10104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        424⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        425⤵
        
        PID:10140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        426⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        427⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        428⤵
        
        PID:10188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        429⤵
        System Location Discovery: System Language Discovery
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        430⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        431⤵
        System Location Discovery: System Language Discovery
        
        PID:10236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        432⤵
        
        PID:1392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        433⤵
        
        PID:3080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        434⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        435⤵
        
        PID:10252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        436⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        437⤵
        System Location Discovery: System Language Discovery
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        438⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        439⤵
        System Location Discovery: System Language Discovery
        
        PID:10316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        440⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        441⤵
        
        PID:10348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        442⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        443⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        444⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        445⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        446⤵
        
        PID:10416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        447⤵
        System Location Discovery: System Language Discovery
        
        PID:10432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        448⤵
        
        PID:10448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        449⤵
        
        PID:10464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        450⤵
        
        PID:10480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        451⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        452⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        453⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        454⤵
        
        PID:10544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        455⤵
        
        PID:10560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        456⤵
        
        PID:10576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        457⤵
        
        PID:10592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        458⤵
        System Location Discovery: System Language Discovery
        
        PID:10608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        459⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        460⤵
        
        PID:10640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        461⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        462⤵
        
        PID:10672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        463⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        464⤵
        
        PID:10704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        465⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        466⤵
        
        PID:10736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        467⤵
        
        PID:10752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        468⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        469⤵
        
        PID:10784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        470⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        471⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        472⤵
        
        PID:10832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        473⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        474⤵
        
        PID:10864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        475⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        476⤵
        
        PID:10892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        477⤵
        
        PID:10908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        478⤵
        
        PID:10924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        479⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        480⤵
        
        PID:10952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        481⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        482⤵
        
        PID:10980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        483⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        484⤵
        
        PID:11012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        485⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        486⤵
        
        PID:11044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        487⤵
        
        PID:11056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        488⤵
        
        PID:11072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        489⤵
        
        PID:11088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        490⤵
        
        PID:11104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        491⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        492⤵
        
        PID:11136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        493⤵
        
        PID:11152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        494⤵
        
        PID:11168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        495⤵
        System Location Discovery: System Language Discovery
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        496⤵
        
        PID:11200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        497⤵
        System Location Discovery: System Language Discovery
        
        PID:11216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        498⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        499⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        500⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        501⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        502⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        503⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        504⤵
        
        PID:11348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        505⤵
        
        PID:11360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        506⤵
        
        PID:11376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        507⤵
        
        PID:11392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        508⤵
        
        PID:11408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        509⤵
        
        PID:11424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        510⤵
        
        PID:11440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        511⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        512⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        513⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        514⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        515⤵
        
        PID:11520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        516⤵
        
        PID:11536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        517⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        518⤵
        
        PID:11572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        519⤵
        
        PID:11584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        520⤵
        
        PID:11604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        521⤵
        
        PID:11616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        522⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        523⤵
        
        PID:11648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        524⤵
        System Location Discovery: System Language Discovery
        
        PID:11664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        525⤵
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        526⤵
        
        PID:11692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        527⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        528⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        529⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        530⤵
        
        PID:11752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        531⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        532⤵
        
        PID:11788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        533⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        534⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        535⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        536⤵
        
        PID:11848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        537⤵
        
        PID:11864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        538⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        539⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        540⤵
        
        PID:11912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        541⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        542⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        543⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        544⤵
        
        PID:11972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        545⤵
        
        PID:11988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        546⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        547⤵
        
        PID:12024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        548⤵
        
        PID:12040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        549⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        550⤵
        
        PID:12068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        551⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        552⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        553⤵
        
        PID:12104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        554⤵
        
        PID:12120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        555⤵
        
        PID:12136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        556⤵
        
        PID:12152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        557⤵
        System Location Discovery: System Language Discovery
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        558⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        559⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        560⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        561⤵
        
        PID:12228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        562⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        563⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        564⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        565⤵
        
        PID:3252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        566⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        567⤵
        System Location Discovery: System Language Discovery
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        568⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        569⤵
        
        PID:12344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        570⤵
        
        PID:12360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        571⤵
        
        PID:12376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        572⤵
        
        PID:12392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        573⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        574⤵
        
        PID:12424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        575⤵
        
        PID:12440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        576⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        577⤵
        
        PID:12480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        578⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        579⤵
        
        PID:12524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        580⤵
        
        PID:12572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        581⤵
        
        PID:12592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        582⤵
        
        PID:12620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        583⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        584⤵
        System Location Discovery: System Language Discovery
        
        PID:12684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        585⤵
        
        PID:12712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        586⤵
        
        PID:12732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        587⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        588⤵
        
        PID:12772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        589⤵
        
        PID:12788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        590⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        591⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        592⤵
        
        PID:12840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        593⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        594⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        595⤵
        System Location Discovery: System Language Discovery
        
        PID:12908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        596⤵
        
        PID:12948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        597⤵
        
        PID:12972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        598⤵
        
        PID:12984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        599⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        600⤵
        System Location Discovery: System Language Discovery
        
        PID:13012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        601⤵
        
        PID:13028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        602⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        603⤵
        
        PID:13060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        604⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        605⤵
        
        PID:13092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        606⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        607⤵
        
        PID:13124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        608⤵
        
        PID:13140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        609⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        610⤵
        System Location Discovery: System Language Discovery
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        611⤵
        
        PID:13188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        612⤵
        
        PID:13204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        613⤵
        
        PID:13220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        614⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        615⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        616⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        617⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        618⤵
        
        PID:13304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        619⤵
        
        PID:4960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        620⤵
        
        PID:4452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        621⤵
        
        PID:12924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        622⤵
        
        PID:12900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        623⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        624⤵
        
        PID:1836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        625⤵
        
        PID:1772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        626⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        627⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        628⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        629⤵
        
        PID:13368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        630⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        631⤵
        
        PID:13400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        632⤵
        
        PID:13416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        633⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        634⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        635⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        636⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        637⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        638⤵
        
        PID:13516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        639⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        640⤵
        System Location Discovery: System Language Discovery
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        641⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        642⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        643⤵
        
        PID:13592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        644⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        645⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        646⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        647⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        648⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        649⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        650⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        651⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        652⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        653⤵
        
        PID:13752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        654⤵
        
        PID:13764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        655⤵
        
        PID:13780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        656⤵
        
        PID:13792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        657⤵
        
        PID:13808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        658⤵
        
        PID:13824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        659⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        660⤵
        
        PID:13852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        661⤵
        
        PID:13868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        662⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        663⤵
        
        PID:13896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        664⤵
        
        PID:13908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        665⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        666⤵
        
        PID:13952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        667⤵
        
        PID:13964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        668⤵
        
        PID:13976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        669⤵
        
        PID:13992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        670⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        671⤵
        
        PID:14016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        672⤵
        
        PID:14028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        673⤵
        
        PID:14044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        674⤵
        
        PID:14056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        675⤵
        System Location Discovery: System Language Discovery
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        676⤵
        System Location Discovery: System Language Discovery
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        677⤵
        
        PID:14104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        678⤵
        
        PID:14120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        679⤵
        
        PID:14136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        680⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        681⤵
        
        PID:14168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        682⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        683⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        684⤵
        
        PID:14216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        685⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        686⤵
        
        PID:14268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        687⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        688⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        689⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        690⤵
        
        PID:9776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        691⤵
        
        PID:9252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        692⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        693⤵
        
        PID:9296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        694⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        695⤵
        
        PID:14344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        696⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        697⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        698⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        699⤵
        
        PID:14408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        700⤵
        
        PID:14424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        701⤵
        
        PID:14440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        702⤵
        
        PID:14464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        703⤵
        
        PID:14480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        704⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        705⤵
        
        PID:14512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        706⤵
        
        PID:14528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        707⤵
        
        PID:14544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        708⤵
        
        PID:14560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        709⤵
        
        PID:14576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        710⤵
        
        PID:14592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        711⤵
        
        PID:14604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        712⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        713⤵
        
        PID:14640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        714⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        715⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        716⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        717⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        718⤵
        
        PID:14712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        719⤵
        
        PID:14724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        720⤵
        
        PID:14736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        721⤵
        System Location Discovery: System Language Discovery
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        722⤵
        
        PID:14760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        723⤵
        
        PID:14772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        724⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        725⤵
        System Location Discovery: System Language Discovery
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        726⤵
        
        PID:14812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        727⤵
        
        PID:14824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        728⤵
        
        PID:14836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        729⤵
        
        PID:14848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        730⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        731⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        732⤵
        
        PID:14888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        733⤵
        
        PID:14900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        734⤵
        
        PID:14916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        735⤵
        
        PID:14932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        736⤵
        
        PID:14948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        737⤵
        
        PID:14964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        738⤵
        
        PID:14976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        739⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        740⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        741⤵
        
        PID:15020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        742⤵
        
        PID:15036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        743⤵
        
        PID:15052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        744⤵
        
        PID:15068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        745⤵
        
        PID:15084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        746⤵
        System Location Discovery: System Language Discovery
        
        PID:15096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        747⤵
        
        PID:15112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        748⤵
        
        PID:15128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        749⤵
        
        PID:15144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        750⤵
        
        PID:15160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        751⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        752⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        753⤵
        
        PID:15208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        754⤵
        
        PID:15224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        755⤵
        
        PID:15240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        756⤵
        
        PID:15256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        757⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        758⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        759⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        760⤵
        
        PID:15320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        761⤵
        
        PID:15332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        762⤵
        
        PID:15348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        763⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        764⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        765⤵
        
        PID:15368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        766⤵
        
        PID:15380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        767⤵
        
        PID:15396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        768⤵
        
        PID:15408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        769⤵
        
        PID:15424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        770⤵
        
        PID:15440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        771⤵
        
        PID:15452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        772⤵
        
        PID:15468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        773⤵
        
        PID:15480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        774⤵
        
        PID:15496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        775⤵
        System Location Discovery: System Language Discovery
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        776⤵
        
        PID:15528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        777⤵
        
        PID:15552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        778⤵
        
        PID:15576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        779⤵
        
        PID:15600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        780⤵
        
        PID:15616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        781⤵
        
        PID:15628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        782⤵
        
        PID:15664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        783⤵
        
        PID:15688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        784⤵
        
        PID:15704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        785⤵
        
        PID:15724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        786⤵
        
        PID:15744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        787⤵
        
        PID:15784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        788⤵
        
        PID:15804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        789⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        790⤵
        System Location Discovery: System Language Discovery
        
        PID:15840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        791⤵
        
        PID:15856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        792⤵
        
        PID:15876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        793⤵
        
        PID:15888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        794⤵
        
        PID:15904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        795⤵
        System Location Discovery: System Language Discovery
        
        PID:15920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        796⤵
        
        PID:15936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        797⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        798⤵
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        799⤵
        
        PID:15980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        800⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        801⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        802⤵
        System Location Discovery: System Language Discovery
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        803⤵
        
        PID:16036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        804⤵
        
        PID:16052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        805⤵
        
        PID:16068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        806⤵
        
        PID:16084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        807⤵
        
        PID:16100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        808⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        809⤵
        
        PID:16132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        810⤵
        
        PID:16148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        811⤵
        
        PID:16164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        812⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        813⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        814⤵
        
        PID:16212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        815⤵
        
        PID:16232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        816⤵
        
        PID:16244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        817⤵
        
        PID:16260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        818⤵
        
        PID:16276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        819⤵
        System Location Discovery: System Language Discovery
        
        PID:16292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        820⤵
        
        PID:16308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        821⤵
        
        PID:16324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        822⤵
        System Location Discovery: System Language Discovery
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        823⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        824⤵
        
        PID:16368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        825⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        826⤵
        
        PID:1520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        827⤵
        
        PID:15656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        828⤵
        System Location Discovery: System Language Discovery
        
        PID:2420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        829⤵
        
        PID:15768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        830⤵
        
        PID:15816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        831⤵
        
        PID:15752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        832⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        833⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        834⤵
        
        PID:2932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        835⤵
        
        PID:4324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        836⤵
        
        PID:2232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        837⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        838⤵
        System Location Discovery: System Language Discovery
        
        PID:1424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        839⤵
        
        PID:4300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        840⤵
        
        PID:1764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        841⤵
        
        PID:1852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        842⤵
        
        PID:3736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        843⤵
        
        PID:1692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        844⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        845⤵
        System Location Discovery: System Language Discovery
        
        PID:2636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        846⤵
        
        PID:1496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        847⤵
        System Location Discovery: System Language Discovery
        
        PID:2600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        848⤵
        
        PID:3784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        849⤵
        
        PID:3192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        850⤵
        
        PID:640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        851⤵
        
        PID:2588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        852⤵
        
        PID:2288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        853⤵
        System Location Discovery: System Language Discovery
        
        PID:260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        854⤵
        
        PID:3164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        855⤵
        
        PID:3788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        856⤵
        
        PID:2960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        857⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        858⤵
        
        PID:2004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        859⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        860⤵
        
        PID:1384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        861⤵
        
        PID:4252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        862⤵
        
        PID:3332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\899db100fee56031bd2ba05bf125a5d97079770bb7a4e84cbe81b033e7b559c3.dll,#1
        863⤵
        
        PID:3428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads