rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\libemb.dll,FreeLibraryMemoryAndExitThread
1952rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\libemb.dll,
2156rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\libemb.dll,NtUnloadDllMemoryAndExitThread
2068