33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll
Size 3KB
Sample260910-pxrv6sxtas
SHA256 33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2
MD5 783044db9a47829c292219d39b3dde56
SHA1 813069044439b0c901932fff181db94a0cb1ee29
SHA512 df1347be5660ed91666b3a684973669eeb7945cc323736c5bd6cf5357107022fee74af6d12367d371ac9c7e4a054851e3a769ab1a755f01733cc16c6770a832f
TLSH
T17D713F3B2B99EEB2C0A4277517E7178D719AAF25432342874681852E942D2A07FF2B11
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 452 wrote to memory of 3848	452	rundll32.exe	86
PID 3848 wrote to memory of 4072	3848	rundll32.exe	87
PID 4072 wrote to memory of 4444	4072	rundll32.exe	88
PID 4444 wrote to memory of 4472	4444	rundll32.exe	89
PID 4472 wrote to memory of 4816	4472	rundll32.exe	90
PID 4816 wrote to memory of 1184	4816	rundll32.exe	91
PID 1184 wrote to memory of 2860	1184	rundll32.exe	92
PID 2860 wrote to memory of 4160	2860	rundll32.exe	93
PID 4160 wrote to memory of 4092	4160	rundll32.exe	94
PID 4092 wrote to memory of 5004	4092	rundll32.exe	95
PID 5004 wrote to memory of 2284	5004	rundll32.exe	96
PID 2284 wrote to memory of 4280	2284	rundll32.exe	97
PID 4280 wrote to memory of 1788	4280	rundll32.exe	98
PID 1788 wrote to memory of 1740	1788	rundll32.exe	99
PID 1740 wrote to memory of 3664	1740	rundll32.exe	100
PID 3664 wrote to memory of 4296	3664	rundll32.exe	101
PID 4296 wrote to memory of 948	4296	rundll32.exe	102
PID 948 wrote to memory of 1768	948	rundll32.exe	103
PID 1768 wrote to memory of 4540	1768	rundll32.exe	104
PID 4540 wrote to memory of 5116	4540	rundll32.exe	105
PID 5116 wrote to memory of 5108	5116	rundll32.exe	106
PID 5108 wrote to memory of 4972	5108	rundll32.exe	107
PID 4972 wrote to memory of 2672	4972	rundll32.exe	108
PID 2672 wrote to memory of 5092	2672	rundll32.exe	109
PID 5092 wrote to memory of 3104	5092	rundll32.exe	110
PID 3104 wrote to memory of 2068	3104	rundll32.exe	111
PID 2068 wrote to memory of 2080	2068	rundll32.exe	112
PID 2080 wrote to memory of 1324	2080	rundll32.exe	113
PID 1324 wrote to memory of 3476	1324	rundll32.exe	114
PID 3476 wrote to memory of 4712	3476	rundll32.exe	115
PID 4712 wrote to memory of 4384	4712	rundll32.exe	116
PID 4384 wrote to memory of 828	4384	rundll32.exe	117
PID 828 wrote to memory of 3280	828	rundll32.exe	118
PID 3280 wrote to memory of 4896	3280	rundll32.exe	119
PID 4896 wrote to memory of 1480	4896	rundll32.exe	120
PID 1480 wrote to memory of 4136	1480	rundll32.exe	121
PID 4136 wrote to memory of 2084	4136	rundll32.exe	122
PID 2084 wrote to memory of 1416	2084	rundll32.exe	123
PID 1416 wrote to memory of 3156	1416	rundll32.exe	124
PID 3156 wrote to memory of 1372	3156	rundll32.exe	125
PID 1372 wrote to memory of 560	1372	rundll32.exe	126
PID 560 wrote to memory of 3108	560	rundll32.exe	127
PID 3108 wrote to memory of 752	3108	rundll32.exe	128
PID 752 wrote to memory of 1252	752	rundll32.exe	129
PID 1252 wrote to memory of 2612	1252	rundll32.exe	130
PID 2612 wrote to memory of 4372	2612	rundll32.exe	131
PID 4372 wrote to memory of 4508	4372	rundll32.exe	132
PID 4508 wrote to memory of 4880	4508	rundll32.exe	133
PID 4880 wrote to memory of 3680	4880	rundll32.exe	134
PID 3680 wrote to memory of 2304	3680	rundll32.exe	135
PID 2304 wrote to memory of 4148	2304	rundll32.exe	136
PID 4148 wrote to memory of 632	4148	rundll32.exe	137
PID 632 wrote to memory of 2592	632	rundll32.exe	138
PID 2592 wrote to memory of 876	2592	rundll32.exe	139
PID 876 wrote to memory of 4436	876	rundll32.exe	140
PID 4436 wrote to memory of 4348	4436	rundll32.exe	141
PID 4348 wrote to memory of 2520	4348	rundll32.exe	142
PID 2520 wrote to memory of 780	2520	rundll32.exe	143
PID 780 wrote to memory of 3236	780	rundll32.exe	144
PID 3236 wrote to memory of 116	3236	rundll32.exe	145
PID 116 wrote to memory of 2464	116	rundll32.exe	146
PID 2464 wrote to memory of 3500	2464	rundll32.exe	147
PID 3500 wrote to memory of 5068	3500	rundll32.exe	148
PID 5068 wrote to memory of 4640	5068	rundll32.exe	149

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:452
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3848
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4072
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4444
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4472
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:4816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:1184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:2860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:4160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:5004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:1788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:1740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:5116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:5108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        23⤵
        Suspicious use of WriteProcessMemory
        
        PID:4972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:2672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        25⤵
        Suspicious use of WriteProcessMemory
        
        PID:5092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:3104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:2068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:2080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        29⤵
        Suspicious use of WriteProcessMemory
        
        PID:1324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        30⤵
        Suspicious use of WriteProcessMemory
        
        PID:3476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:4712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        32⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:3280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:4896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        36⤵
        Suspicious use of WriteProcessMemory
        
        PID:1480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:4136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:2084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:1416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:3156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:1372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        42⤵
        Suspicious use of WriteProcessMemory
        
        PID:560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:3108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        45⤵
        Suspicious use of WriteProcessMemory
        
        PID:1252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        46⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        47⤵
        Suspicious use of WriteProcessMemory
        
        PID:4372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:4508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:4880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:3680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:2304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        52⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:2592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        56⤵
        Suspicious use of WriteProcessMemory
        
        PID:4436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:4348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:2520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        59⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:3236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:2464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:3500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:5068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        65⤵
        
        PID:4640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        66⤵
        
        PID:3324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        67⤵
        
        PID:756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        68⤵
        System Location Discovery: System Language Discovery
        
        PID:4488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        69⤵
        System Location Discovery: System Language Discovery
        
        PID:4736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        70⤵
        
        PID:1260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        71⤵
        
        PID:3464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        72⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        73⤵
        
        PID:4716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        74⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        75⤵
        
        PID:4968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        76⤵
        System Location Discovery: System Language Discovery
        
        PID:2168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        77⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        78⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        79⤵
        System Location Discovery: System Language Discovery
        
        PID:2936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        80⤵
        
        PID:2164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        81⤵
        
        PID:3448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        82⤵
        
        PID:2484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        83⤵
        
        PID:4580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        84⤵
        System Location Discovery: System Language Discovery
        
        PID:3432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        85⤵
        
        PID:1704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        86⤵
        
        PID:4020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        87⤵
        
        PID:1476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        88⤵
        
        PID:3052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        89⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        90⤵
        
        PID:4908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        91⤵
        
        PID:1188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        92⤵
        
        PID:2832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        93⤵
        
        PID:1900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        94⤵
        
        PID:3316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        95⤵
        
        PID:4916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        96⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        97⤵
        
        PID:2232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        98⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        99⤵
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        100⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        101⤵
        
        PID:4624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        102⤵
        
        PID:4576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        103⤵
        
        PID:468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        104⤵
        
        PID:3700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        105⤵
        
        PID:2944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        106⤵
        
        PID:3356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        107⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        108⤵
        
        PID:1012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        109⤵
        
        PID:4892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        110⤵
        
        PID:4788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        111⤵
        
        PID:4188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        112⤵
        
        PID:5128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        113⤵
        
        PID:5144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        114⤵
        
        PID:5160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        115⤵
        
        PID:5192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        116⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        117⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        118⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        119⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        120⤵
        
        PID:5276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        121⤵
        
        PID:5292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        122⤵
        
        PID:5308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        123⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        124⤵
        
        PID:5340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        125⤵
        
        PID:5356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        126⤵
        
        PID:5372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        127⤵
        
        PID:5388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        128⤵
        
        PID:5404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        129⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        130⤵
        
        PID:5436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        131⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        132⤵
        
        PID:5468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        133⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        134⤵
        
        PID:5500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        135⤵
        
        PID:5516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        136⤵
        
        PID:5532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        137⤵
        
        PID:5556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        138⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        139⤵
        
        PID:5592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        140⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        141⤵
        
        PID:5656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        142⤵
        
        PID:5680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        143⤵
        
        PID:5696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        144⤵
        
        PID:5712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        145⤵
        
        PID:5724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        146⤵
        
        PID:5740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        147⤵
        System Location Discovery: System Language Discovery
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        148⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        149⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        150⤵
        
        PID:5804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        151⤵
        
        PID:5820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        152⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        153⤵
        
        PID:5848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        154⤵
        
        PID:5864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        155⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        156⤵
        
        PID:5900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        157⤵
        
        PID:5920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        158⤵
        
        PID:5936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        159⤵
        System Location Discovery: System Language Discovery
        
        PID:5956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        160⤵
        
        PID:5972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        161⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        162⤵
        
        PID:6004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        163⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        164⤵
        
        PID:6040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        165⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        166⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        167⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        168⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        169⤵
        
        PID:6116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        170⤵
        
        PID:6132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        171⤵
        
        PID:400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        172⤵
        
        PID:1540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        173⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        174⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        175⤵
        
        PID:6168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        176⤵
        
        PID:6196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        177⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        178⤵
        
        PID:6224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        179⤵
        
        PID:6256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        180⤵
        
        PID:6284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        181⤵
        
        PID:6300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        182⤵
        System Location Discovery: System Language Discovery
        
        PID:6344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        183⤵
        
        PID:6368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        184⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        185⤵
        
        PID:6400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        186⤵
        
        PID:6432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        187⤵
        
        PID:6484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        188⤵
        
        PID:6544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        189⤵
        
        PID:6572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        190⤵
        
        PID:6584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        191⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        192⤵
        
        PID:6616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        193⤵
        
        PID:6632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        194⤵
        
        PID:6652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        195⤵
        
        PID:6676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        196⤵
        
        PID:6692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        197⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        198⤵
        System Location Discovery: System Language Discovery
        
        PID:6736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        199⤵
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        200⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        201⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        202⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        203⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        204⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        205⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        206⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        207⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        208⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        209⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        210⤵
        
        PID:6908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        211⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        212⤵
        
        PID:6940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        213⤵
        
        PID:6956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        214⤵
        
        PID:6972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        215⤵
        
        PID:6988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        216⤵
        
        PID:7004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        217⤵
        
        PID:7020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        218⤵
        
        PID:7036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        219⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        220⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        221⤵
        
        PID:7084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        222⤵
        System Location Discovery: System Language Discovery
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        223⤵
        
        PID:7116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        224⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        225⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        226⤵
        
        PID:7164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        227⤵
        
        PID:7172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        228⤵
        
        PID:7188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        229⤵
        
        PID:7204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        230⤵
        
        PID:7224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        231⤵
        
        PID:7236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        232⤵
        
        PID:7252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        233⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        234⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        235⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        236⤵
        
        PID:7316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        237⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        238⤵
        
        PID:7352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        239⤵
        
        PID:7364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        240⤵
        
        PID:7384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        241⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        242⤵
        
        PID:7412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        243⤵
        
        PID:7428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        244⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        245⤵
        
        PID:7456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        246⤵
        
        PID:7472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        247⤵
        
        PID:7488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        248⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        249⤵
        System Location Discovery: System Language Discovery
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        250⤵
        
        PID:7532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        251⤵
        
        PID:7544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        252⤵
        
        PID:7560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        253⤵
        
        PID:7576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        254⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        255⤵
        
        PID:7608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        256⤵
        
        PID:7624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        257⤵
        
        PID:7636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        258⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        259⤵
        
        PID:7684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        260⤵
        
        PID:7716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        261⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        262⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        263⤵
        
        PID:7756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        264⤵
        
        PID:7768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        265⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        266⤵
        
        PID:7796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        267⤵
        
        PID:7812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        268⤵
        
        PID:7828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        269⤵
        
        PID:7844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        270⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        271⤵
        
        PID:7876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        272⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        273⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        274⤵
        
        PID:7924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        275⤵
        
        PID:7940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        276⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        277⤵
        
        PID:7972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        278⤵
        
        PID:7984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        279⤵
        
        PID:8000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        280⤵
        
        PID:8016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        281⤵
        System Location Discovery: System Language Discovery
        
        PID:8032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        282⤵
        
        PID:8048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        283⤵
        
        PID:8064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        284⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        285⤵
        
        PID:8096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        286⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        287⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        288⤵
        
        PID:8148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        289⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        290⤵
        
        PID:8176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        291⤵
        
        PID:7708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        292⤵
        System Location Discovery: System Language Discovery
        
        PID:8208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        293⤵
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        294⤵
        
        PID:8240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        295⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        296⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        297⤵
        System Location Discovery: System Language Discovery
        
        PID:8288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        298⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        299⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        300⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        301⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        302⤵
        
        PID:8360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        303⤵
        
        PID:8372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        304⤵
        
        PID:8384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        305⤵
        
        PID:8404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        306⤵
        
        PID:8416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        307⤵
        
        PID:8432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        308⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        309⤵
        
        PID:8460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        310⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        311⤵
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        312⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        313⤵
        
        PID:8524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        314⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        315⤵
        
        PID:8556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        316⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        317⤵
        
        PID:8588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        318⤵
        
        PID:8604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        319⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        320⤵
        
        PID:8632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        321⤵
        
        PID:8648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        322⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        323⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        324⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        325⤵
        System Location Discovery: System Language Discovery
        
        PID:8760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        326⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        327⤵
        
        PID:8816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        328⤵
        
        PID:8848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        329⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        330⤵
        System Location Discovery: System Language Discovery
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        331⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        332⤵
        
        PID:8952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        333⤵
        
        PID:8972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        334⤵
        
        PID:9004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        335⤵
        
        PID:9016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        336⤵
        
        PID:9032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        337⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        338⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        339⤵
        
        PID:9088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        340⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        341⤵
        
        PID:9148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        342⤵
        
        PID:9160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        343⤵
        
        PID:9176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        344⤵
        
        PID:9200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        345⤵
        
        PID:8708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        346⤵
        System Location Discovery: System Language Discovery
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        347⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        348⤵
        
        PID:9260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        349⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        350⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        351⤵
        
        PID:9312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        352⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        353⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        354⤵
        
        PID:9364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        355⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        356⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        357⤵
        
        PID:9424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        358⤵
        
        PID:9436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        359⤵
        
        PID:9452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        360⤵
        
        PID:9464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        361⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        362⤵
        
        PID:9496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        363⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        364⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        365⤵
        
        PID:9536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        366⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        367⤵
        
        PID:9564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        368⤵
        
        PID:9580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        369⤵
        
        PID:9592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        370⤵
        
        PID:9608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        371⤵
        
        PID:9624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        372⤵
        
        PID:9640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        373⤵
        
        PID:9652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        374⤵
        
        PID:9668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        375⤵
        
        PID:9684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        376⤵
        
        PID:9700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        377⤵
        System Location Discovery: System Language Discovery
        
        PID:9716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        378⤵
        
        PID:9732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        379⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        380⤵
        
        PID:9764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        381⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        382⤵
        
        PID:9796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        383⤵
        
        PID:9808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        384⤵
        
        PID:9824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        385⤵
        System Location Discovery: System Language Discovery
        
        PID:9844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        386⤵
        
        PID:9856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        387⤵
        
        PID:9872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        388⤵
        
        PID:9888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        389⤵
        
        PID:9904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        390⤵
        
        PID:9920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        391⤵
        System Location Discovery: System Language Discovery
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        392⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        393⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        394⤵
        System Location Discovery: System Language Discovery
        
        PID:9984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        395⤵
        
        PID:10000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        396⤵
        
        PID:10016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        397⤵
        
        PID:10032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        398⤵
        
        PID:10048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        399⤵
        
        PID:10064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        400⤵
        
        PID:10080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        401⤵
        
        PID:10096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        402⤵
        
        PID:10108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        403⤵
        System Location Discovery: System Language Discovery
        
        PID:10124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        404⤵
        System Location Discovery: System Language Discovery
        
        PID:10140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        405⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        406⤵
        
        PID:10172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        407⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        408⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        409⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        410⤵
        
        PID:10228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        411⤵
        
        PID:9128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        412⤵
        
        PID:9144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        413⤵
        System Location Discovery: System Language Discovery
        
        PID:9076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        414⤵
        System Location Discovery: System Language Discovery
        
        PID:2328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        415⤵
        
        PID:4376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        416⤵
        
        PID:4032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        417⤵
        
        PID:6180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        418⤵
        
        PID:6184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        419⤵
        
        PID:5620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        420⤵
        
        PID:5616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        421⤵
        
        PID:1088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        422⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        423⤵
        System Location Discovery: System Language Discovery
        
        PID:3884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        424⤵
        
        PID:10248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        425⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        426⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        427⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        428⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        429⤵
        
        PID:10324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        430⤵
        
        PID:10340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        431⤵
        
        PID:10356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        432⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        433⤵
        System Location Discovery: System Language Discovery
        
        PID:10388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        434⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        435⤵
        
        PID:10420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        436⤵
        
        PID:10436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        437⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        438⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        439⤵
        
        PID:10484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        440⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        441⤵
        System Location Discovery: System Language Discovery
        
        PID:10516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        442⤵
        
        PID:10532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        443⤵
        
        PID:10548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        444⤵
        
        PID:10564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        445⤵
        
        PID:10580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        446⤵
        
        PID:10596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        447⤵
        
        PID:10612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        448⤵
        
        PID:10624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        449⤵
        
        PID:10636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        450⤵
        
        PID:10648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        451⤵
        
        PID:10664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        452⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        453⤵
        
        PID:10688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        454⤵
        System Location Discovery: System Language Discovery
        
        PID:10704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        455⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        456⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        457⤵
        
        PID:10748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        458⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        459⤵
        
        PID:10772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        460⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        461⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        462⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        463⤵
        
        PID:10832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        464⤵
        
        PID:10848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        465⤵
        
        PID:10864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        466⤵
        
        PID:10880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        467⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        468⤵
        System Location Discovery: System Language Discovery
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        469⤵
        System Location Discovery: System Language Discovery
        
        PID:10928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        470⤵
        
        PID:10948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        471⤵
        
        PID:10960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        472⤵
        
        PID:10976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        473⤵
        
        PID:10992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        474⤵
        
        PID:11008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        475⤵
        
        PID:11024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        476⤵
        
        PID:11040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        477⤵
        
        PID:11056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        478⤵
        
        PID:11068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        479⤵
        
        PID:11084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        480⤵
        
        PID:11100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        481⤵
        
        PID:11116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        482⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        483⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        484⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        485⤵
        
        PID:11184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        486⤵
        
        PID:11196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        487⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        488⤵
        
        PID:11228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        489⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        490⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        491⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        492⤵
        
        PID:11268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        493⤵
        
        PID:11284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        494⤵
        System Location Discovery: System Language Discovery
        
        PID:11296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        495⤵
        
        PID:11312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        496⤵
        
        PID:11324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        497⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        498⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        499⤵
        
        PID:11372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        500⤵
        
        PID:11388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        501⤵
        System Location Discovery: System Language Discovery
        
        PID:11404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        502⤵
        
        PID:11420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        503⤵
        
        PID:11436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        504⤵
        
        PID:11448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        505⤵
        
        PID:11464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        506⤵
        
        PID:11480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        507⤵
        
        PID:11496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        508⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        509⤵
        
        PID:11528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        510⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        511⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        512⤵
        
        PID:11576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        513⤵
        
        PID:11592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        514⤵
        
        PID:11608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        515⤵
        
        PID:11624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        516⤵
        
        PID:11640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        517⤵
        
        PID:11656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        518⤵
        System Location Discovery: System Language Discovery
        
        PID:11676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        519⤵
        
        PID:11688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        520⤵
        
        PID:11708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        521⤵
        
        PID:11720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        522⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        523⤵
        
        PID:11752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        524⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        525⤵
        System Location Discovery: System Language Discovery
        
        PID:11784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        526⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        527⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        528⤵
        System Location Discovery: System Language Discovery
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        529⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        530⤵
        
        PID:11860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        531⤵
        
        PID:11876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        532⤵
        
        PID:11892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        533⤵
        
        PID:11908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        534⤵
        
        PID:11924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        535⤵
        System Location Discovery: System Language Discovery
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        536⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        537⤵
        
        PID:11976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        538⤵
        
        PID:11988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        539⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        540⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        541⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        542⤵
        
        PID:12052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        543⤵
        
        PID:12064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        544⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        545⤵
        
        PID:12092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        546⤵
        
        PID:12108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        547⤵
        
        PID:12124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        548⤵
        
        PID:12140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        549⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        550⤵
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        551⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        552⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        553⤵
        
        PID:12212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        554⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        555⤵
        
        PID:12236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        556⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        557⤵
        
        PID:12268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        558⤵
        
        PID:12284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        559⤵
        
        PID:12296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        560⤵
        
        PID:12312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        561⤵
        
        PID:12328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        562⤵
        
        PID:12340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        563⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        564⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        565⤵
        
        PID:12388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        566⤵
        
        PID:12404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        567⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        568⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        569⤵
        
        PID:12452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        570⤵
        
        PID:12468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        571⤵
        
        PID:12484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        572⤵
        
        PID:12500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        573⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        574⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        575⤵
        
        PID:12544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        576⤵
        
        PID:12560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        577⤵
        
        PID:12576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        578⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        579⤵
        
        PID:12608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        580⤵
        
        PID:12624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        581⤵
        
        PID:12640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        582⤵
        
        PID:12656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        583⤵
        
        PID:12672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        584⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        585⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        586⤵
        
        PID:12724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        587⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        588⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        589⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        590⤵
        
        PID:12780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        591⤵
        
        PID:12792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        592⤵
        
        PID:12808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        593⤵
        
        PID:12820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        594⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        595⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        596⤵
        System Location Discovery: System Language Discovery
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        597⤵
        
        PID:12876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        598⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        599⤵
        System Location Discovery: System Language Discovery
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        600⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        601⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        602⤵
        
        PID:12952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        603⤵
        
        PID:12968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        604⤵
        
        PID:12984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        605⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        606⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        607⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        608⤵
        
        PID:13048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        609⤵
        
        PID:13064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        610⤵
        
        PID:13080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        611⤵
        
        PID:13096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        612⤵
        
        PID:13112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        613⤵
        
        PID:13128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        614⤵
        
        PID:13144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        615⤵
        
        PID:13160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        616⤵
        
        PID:13176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        617⤵
        
        PID:13192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        618⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        619⤵
        
        PID:13224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        620⤵
        
        PID:13240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        621⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        622⤵
        
        PID:13272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        623⤵
        
        PID:13288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        624⤵
        
        PID:13304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        625⤵
        
        PID:13324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        626⤵
        
        PID:13340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        627⤵
        
        PID:13356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        628⤵
        System Location Discovery: System Language Discovery
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        629⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        630⤵
        
        PID:13404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        631⤵
        System Location Discovery: System Language Discovery
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        632⤵
        
        PID:13432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        633⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        634⤵
        
        PID:13460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        635⤵
        
        PID:13476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        636⤵
        
        PID:13492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        637⤵
        
        PID:13508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        638⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        639⤵
        
        PID:13532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        640⤵
        
        PID:13544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        641⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        642⤵
        
        PID:13572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        643⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        644⤵
        
        PID:13596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        645⤵
        
        PID:13608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        646⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        647⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        648⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        649⤵
        
        PID:13672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        650⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        651⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        652⤵
        
        PID:13720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        653⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        654⤵
        System Location Discovery: System Language Discovery
        
        PID:13752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        655⤵
        
        PID:13768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        656⤵
        
        PID:13784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        657⤵
        
        PID:13800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        658⤵
        
        PID:13816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        659⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        660⤵
        
        PID:13848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        661⤵
        
        PID:13864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        662⤵
        
        PID:13880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        663⤵
        
        PID:13896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        664⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        665⤵
        
        PID:13928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        666⤵
        
        PID:13944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        667⤵
        System Location Discovery: System Language Discovery
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        668⤵
        
        PID:13968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        669⤵
        
        PID:13984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        670⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        671⤵
        System Location Discovery: System Language Discovery
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        672⤵
        System Location Discovery: System Language Discovery
        
        PID:14036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        673⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        674⤵
        
        PID:14068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        675⤵
        System Location Discovery: System Language Discovery
        
        PID:14080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        676⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        677⤵
        
        PID:14116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        678⤵
        
        PID:14132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        679⤵
        
        PID:14144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        680⤵
        
        PID:14156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        681⤵
        
        PID:14172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        682⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        683⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        684⤵
        
        PID:14220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        685⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        686⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        687⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        688⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        689⤵
        
        PID:14292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        690⤵
        
        PID:14308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        691⤵
        
        PID:14324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        692⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        693⤵
        
        PID:14356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        694⤵
        
        PID:14372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        695⤵
        
        PID:14388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        696⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        697⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        698⤵
        
        PID:14436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        699⤵
        
        PID:14452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        700⤵
        
        PID:14468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        701⤵
        
        PID:14480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        702⤵
        
        PID:14496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        703⤵
        
        PID:14508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        704⤵
        
        PID:14524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        705⤵
        
        PID:14540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        706⤵
        
        PID:14556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        707⤵
        
        PID:14572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        708⤵
        
        PID:14588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        709⤵
        
        PID:14604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        710⤵
        
        PID:14620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        711⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        712⤵
        
        PID:14652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        713⤵
        
        PID:14668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        714⤵
        
        PID:14684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        715⤵
        
        PID:14700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        716⤵
        
        PID:14716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        717⤵
        
        PID:14732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        718⤵
        
        PID:14748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        719⤵
        
        PID:14764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        720⤵
        
        PID:14780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        721⤵
        
        PID:14796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        722⤵
        
        PID:14808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        723⤵
        
        PID:14828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        724⤵
        
        PID:14840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        725⤵
        
        PID:14852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        726⤵
        
        PID:14864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        727⤵
        
        PID:14880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        728⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        729⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        730⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        731⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        732⤵
        
        PID:14964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        733⤵
        
        PID:14988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        734⤵
        
        PID:15004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        735⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        736⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        737⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        738⤵
        
        PID:15092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        739⤵
        
        PID:15108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        740⤵
        
        PID:15124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        741⤵
        
        PID:15148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        742⤵
        
        PID:15176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        743⤵
        
        PID:15192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        744⤵
        
        PID:15212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        745⤵
        
        PID:15248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        746⤵
        
        PID:15260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        747⤵
        
        PID:15276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        748⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        749⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        750⤵
        
        PID:15324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        751⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        752⤵
        
        PID:15356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        753⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        754⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        755⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        756⤵
        
        PID:2184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        757⤵
        System Location Discovery: System Language Discovery
        
        PID:4204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        758⤵
        System Location Discovery: System Language Discovery
        
        PID:15204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        759⤵
        
        PID:15244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        760⤵
        
        PID:3712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        761⤵
        
        PID:2340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        762⤵
        
        PID:4332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        763⤵
        
        PID:4176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        764⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        765⤵
        
        PID:4944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        766⤵
        
        PID:1128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        767⤵
        
        PID:664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        768⤵
        
        PID:648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        769⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        770⤵
        
        PID:4468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        771⤵
        
        PID:652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        772⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        773⤵
        
        PID:4464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        774⤵
        
        PID:2428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        775⤵
        
        PID:3396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        776⤵
        
        PID:4084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        777⤵
        
        PID:2064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        778⤵
        
        PID:3568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        779⤵
        
        PID:2632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        780⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        781⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        782⤵
        
        PID:3880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        783⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        784⤵
        
        PID:3152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        785⤵
        System Location Discovery: System Language Discovery
        
        PID:1280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        786⤵
        
        PID:3916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        787⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        788⤵
        
        PID:1068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        789⤵
        
        PID:2228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        790⤵
        
        PID:4028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        791⤵
        
        PID:3952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        792⤵
        
        PID:3720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        793⤵
        
        PID:3788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        794⤵
        
        PID:2708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        795⤵
        
        PID:2776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        796⤵
        
        PID:4636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        797⤵
        
        PID:4616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        798⤵
        
        PID:4844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        799⤵
        
        PID:3180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        800⤵
        System Location Discovery: System Language Discovery
        
        PID:2516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        801⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        802⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        803⤵
        
        PID:2584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        804⤵
        
        PID:900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        805⤵
        
        PID:2792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        806⤵
        System Location Discovery: System Language Discovery
        
        PID:4856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        807⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        808⤵
        
        PID:15388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        809⤵
        
        PID:15404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        810⤵
        System Location Discovery: System Language Discovery
        
        PID:15420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        811⤵
        
        PID:15436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        812⤵
        
        PID:15452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        813⤵
        
        PID:15468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        814⤵
        System Location Discovery: System Language Discovery
        
        PID:15484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        815⤵
        
        PID:15500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        816⤵
        
        PID:15516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        817⤵
        
        PID:15532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        818⤵
        
        PID:15548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        819⤵
        
        PID:15564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        820⤵
        
        PID:15580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        821⤵
        
        PID:15596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        822⤵
        
        PID:15612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        823⤵
        
        PID:15632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        824⤵
        
        PID:15644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        825⤵
        
        PID:15668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        826⤵
        System Location Discovery: System Language Discovery
        
        PID:15684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        827⤵
        
        PID:15700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        828⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        829⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        830⤵
        
        PID:15744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        831⤵
        
        PID:15764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        832⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        833⤵
        
        PID:15788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        834⤵
        
        PID:15800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        835⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        836⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        837⤵
        
        PID:15848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        838⤵
        
        PID:15868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        839⤵
        
        PID:15880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        840⤵
        
        PID:15896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        841⤵
        System Location Discovery: System Language Discovery
        
        PID:15916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        842⤵
        
        PID:15928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        843⤵
        
        PID:15940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        844⤵
        
        PID:15956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        845⤵
        System Location Discovery: System Language Discovery
        
        PID:15968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        846⤵
        
        PID:15984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        847⤵
        
        PID:16000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        848⤵
        
        PID:16012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        849⤵
        
        PID:16028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        850⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        851⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        852⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        853⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        854⤵
        
        PID:16104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        855⤵
        
        PID:16120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        856⤵
        
        PID:16136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        857⤵
        
        PID:16152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        858⤵
        
        PID:16168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        859⤵
        
        PID:16180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        860⤵
        
        PID:16196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        861⤵
        
        PID:16208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        862⤵
        
        PID:16220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        863⤵
        
        PID:16236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        864⤵
        
        PID:16252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        865⤵
        
        PID:16264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        866⤵
        
        PID:16280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        867⤵
        System Location Discovery: System Language Discovery
        
        PID:16296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        868⤵
        
        PID:16312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        869⤵
        
        PID:16328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        870⤵
        
        PID:16340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        871⤵
        
        PID:16356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        872⤵
        
        PID:16372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        873⤵
        
        PID:1336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        874⤵
        System Location Discovery: System Language Discovery
        
        PID:4268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        875⤵
        System Location Discovery: System Language Discovery
        
        PID:3332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        876⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        877⤵
        
        PID:2320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        878⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\33a30c6afd05539475b5224556538775768aded1b308dd7b4cc2ef28c74590f2.dll,#1
        879⤵
        
        PID:5156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads