00bf5d737f783033a06f174a22587202dabd86ebc7d6f64530bbbd1651ce6b7e

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
14/02/2024, 09:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll
Size 14.6MB
Sample240214-k99vasfg23
SHA256 00bf5d737f783033a06f174a22587202dabd86ebc7d6f64530bbbd1651ce6b7e
MD5 d55dfc9eabb7e72e2df1e087098cc102
SHA1 d837213b5ec5f0462631e513c86bc32bed625c37
SHA512 4e66851275dc78acdabbb41f035fa36fd2e203d67081e64da14a682ef45cc2a2126aec58ce122437529a202879f08b66fa9bde76f639fdfc97155c95b826ba40
SSDEEP 196608:8LUipF5Xcu4GSOKEfgri5g67q1jk7aoTeaXf6:8LZFCuzShmTg67q1jhb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1780 wrote to memory of 2172	1780	rundll32.exe	84
PID 1780 wrote to memory of 2172	1780	rundll32.exe	84
PID 1780 wrote to memory of 2172	1780	rundll32.exe	84
PID 2172 wrote to memory of 3996	2172	rundll32.exe	85
PID 2172 wrote to memory of 3996	2172	rundll32.exe	85
PID 2172 wrote to memory of 3996	2172	rundll32.exe	85
PID 3996 wrote to memory of 3936	3996	rundll32.exe	86
PID 3996 wrote to memory of 3936	3996	rundll32.exe	86
PID 3996 wrote to memory of 3936	3996	rundll32.exe	86
PID 3936 wrote to memory of 3472	3936	rundll32.exe	87
PID 3936 wrote to memory of 3472	3936	rundll32.exe	87
PID 3936 wrote to memory of 3472	3936	rundll32.exe	87
PID 3472 wrote to memory of 3268	3472	rundll32.exe	88
PID 3472 wrote to memory of 3268	3472	rundll32.exe	88
PID 3472 wrote to memory of 3268	3472	rundll32.exe	88
PID 3268 wrote to memory of 452	3268	rundll32.exe	89
PID 3268 wrote to memory of 452	3268	rundll32.exe	89
PID 3268 wrote to memory of 452	3268	rundll32.exe	89
PID 452 wrote to memory of 3704	452	rundll32.exe	90
PID 452 wrote to memory of 3704	452	rundll32.exe	90
PID 452 wrote to memory of 3704	452	rundll32.exe	90
PID 3704 wrote to memory of 1252	3704	rundll32.exe	91
PID 3704 wrote to memory of 1252	3704	rundll32.exe	91
PID 3704 wrote to memory of 1252	3704	rundll32.exe	91
PID 1252 wrote to memory of 2052	1252	rundll32.exe	92
PID 1252 wrote to memory of 2052	1252	rundll32.exe	92
PID 1252 wrote to memory of 2052	1252	rundll32.exe	92
PID 2052 wrote to memory of 3280	2052	rundll32.exe	93
PID 2052 wrote to memory of 3280	2052	rundll32.exe	93
PID 2052 wrote to memory of 3280	2052	rundll32.exe	93
PID 3280 wrote to memory of 4176	3280	rundll32.exe	94
PID 3280 wrote to memory of 4176	3280	rundll32.exe	94
PID 3280 wrote to memory of 4176	3280	rundll32.exe	94
PID 4176 wrote to memory of 5076	4176	rundll32.exe	95
PID 4176 wrote to memory of 5076	4176	rundll32.exe	95
PID 4176 wrote to memory of 5076	4176	rundll32.exe	95
PID 5076 wrote to memory of 1248	5076	rundll32.exe	96
PID 5076 wrote to memory of 1248	5076	rundll32.exe	96
PID 5076 wrote to memory of 1248	5076	rundll32.exe	96
PID 1248 wrote to memory of 4400	1248	rundll32.exe	97
PID 1248 wrote to memory of 4400	1248	rundll32.exe	97
PID 1248 wrote to memory of 4400	1248	rundll32.exe	97
PID 4400 wrote to memory of 3964	4400	rundll32.exe	98
PID 4400 wrote to memory of 3964	4400	rundll32.exe	98
PID 4400 wrote to memory of 3964	4400	rundll32.exe	98
PID 3964 wrote to memory of 720	3964	rundll32.exe	99
PID 3964 wrote to memory of 720	3964	rundll32.exe	99
PID 3964 wrote to memory of 720	3964	rundll32.exe	99
PID 720 wrote to memory of 636	720	rundll32.exe	100
PID 720 wrote to memory of 636	720	rundll32.exe	100
PID 720 wrote to memory of 636	720	rundll32.exe	100
PID 636 wrote to memory of 1392	636	rundll32.exe	101
PID 636 wrote to memory of 1392	636	rundll32.exe	101
PID 636 wrote to memory of 1392	636	rundll32.exe	101
PID 1392 wrote to memory of 552	1392	rundll32.exe	102
PID 1392 wrote to memory of 552	1392	rundll32.exe	102
PID 1392 wrote to memory of 552	1392	rundll32.exe	102
PID 552 wrote to memory of 4840	552	rundll32.exe	103
PID 552 wrote to memory of 4840	552	rundll32.exe	103
PID 552 wrote to memory of 4840	552	rundll32.exe	103
PID 4840 wrote to memory of 1364	4840	rundll32.exe	104
PID 4840 wrote to memory of 1364	4840	rundll32.exe	104
PID 4840 wrote to memory of 1364	4840	rundll32.exe	104
PID 1364 wrote to memory of 3632	1364	rundll32.exe	105

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1780
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2172
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3996
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3936
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3472
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:2052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:3280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:4176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:5076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:1248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:4400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:1392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:4840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        23⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        24⤵
        
        PID:744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        25⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        26⤵
        
        PID:2140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        27⤵
        
        PID:1220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        28⤵
        
        PID:4912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        29⤵
        
        PID:2036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        30⤵
        
        PID:3288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        31⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        32⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        33⤵
        
        PID:4440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        34⤵
        
        PID:212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        35⤵
        
        PID:2032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        36⤵
        
        PID:3272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        37⤵
        
        PID:1384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        38⤵
        
        PID:3840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        39⤵
        
        PID:3648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        40⤵
        
        PID:5020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        41⤵
        
        PID:220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        42⤵
        
        PID:2100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        43⤵
        
        PID:4084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        44⤵
        
        PID:4636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        45⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        46⤵
        
        PID:2592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        47⤵
        
        PID:1624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        48⤵
        
        PID:3024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        49⤵
        
        PID:4288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        50⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        51⤵
        
        PID:4600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        52⤵
        
        PID:3972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        53⤵
        
        PID:4012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        54⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        55⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        56⤵
        
        PID:1764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        57⤵
        
        PID:4592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        58⤵
        
        PID:2864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        59⤵
        
        PID:776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        60⤵
        
        PID:4996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        61⤵
        
        PID:3192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        62⤵
        
        PID:3184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        63⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        64⤵
        
        PID:372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        65⤵
        
        PID:676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        66⤵
        
        PID:3508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        67⤵
        
        PID:3696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        68⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        69⤵
        
        PID:2356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        70⤵
        
        PID:3140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        71⤵
        
        PID:928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        72⤵
        
        PID:3480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        73⤵
        
        PID:872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        74⤵
        
        PID:916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        75⤵
        
        PID:2156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        76⤵
        
        PID:4556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        77⤵
        
        PID:2544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        78⤵
        
        PID:4228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        79⤵
        
        PID:4140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        80⤵
        
        PID:4596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        81⤵
        
        PID:4148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        82⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        83⤵
        
        PID:2416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        84⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        85⤵
        
        PID:2748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        86⤵
        
        PID:3628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        87⤵
        
        PID:2824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        88⤵
        
        PID:1272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        89⤵
        
        PID:668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        90⤵
        
        PID:2136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        91⤵
        
        PID:1408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        92⤵
        
        PID:1904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        93⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        94⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        95⤵
        
        PID:4244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        96⤵
        
        PID:4320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        97⤵
        
        PID:4200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        98⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        99⤵
        
        PID:3512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        100⤵
        
        PID:2408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        101⤵
        
        PID:1136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        102⤵
        
        PID:2684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        103⤵
        
        PID:1140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        104⤵
        
        PID:1472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        105⤵
        
        PID:1332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        106⤵
        
        PID:3844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        107⤵
        
        PID:3872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        108⤵
        
        PID:1176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        109⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        110⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        111⤵
        
        PID:4324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        112⤵
        
        PID:4336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        113⤵
        
        PID:4312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        114⤵
        
        PID:3224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        115⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        116⤵
        
        PID:4540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        117⤵
        
        PID:3436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        118⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        119⤵
        
        PID:5136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        120⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        121⤵
        
        PID:5168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        122⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        123⤵
        
        PID:5200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        124⤵
        
        PID:5212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        125⤵
        
        PID:5228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        126⤵
        
        PID:5244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        127⤵
        
        PID:5256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        128⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        129⤵
        
        PID:5288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        130⤵
        
        PID:5300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        131⤵
        
        PID:5316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        132⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        133⤵
        
        PID:5348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        134⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        135⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        136⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        137⤵
        
        PID:5412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        138⤵
        
        PID:5424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        139⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        140⤵
        
        PID:5460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        141⤵
        
        PID:5476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        142⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        143⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        144⤵
        
        PID:5536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        145⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        146⤵
        
        PID:5568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        147⤵
        
        PID:5584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        148⤵
        
        PID:5596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        149⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        150⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        151⤵
        
        PID:5636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        152⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        153⤵
        
        PID:5668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        154⤵
        
        PID:5684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        155⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        156⤵
        
        PID:5716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        157⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        158⤵
        
        PID:5748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        159⤵
        
        PID:5760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        160⤵
        
        PID:5776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        161⤵
        
        PID:5792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        162⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        163⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        164⤵
        
        PID:5840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        165⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        166⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        167⤵
        
        PID:5884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        168⤵
        
        PID:5896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        169⤵
        
        PID:5912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        170⤵
        
        PID:5928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        171⤵
        
        PID:5944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        172⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        173⤵
        
        PID:5976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        174⤵
        
        PID:5992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        175⤵
        
        PID:6008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        176⤵
        
        PID:6020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        177⤵
        
        PID:6036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        178⤵
        
        PID:6052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        179⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        180⤵
        
        PID:6084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        181⤵
        
        PID:6100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        182⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        183⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        184⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        185⤵
        
        PID:5448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        186⤵
        
        PID:6160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        187⤵
        
        PID:6176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        188⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        189⤵
        
        PID:6208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        190⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        191⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        192⤵
        
        PID:6252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        193⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        194⤵
        
        PID:6276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        195⤵
        
        PID:6288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        196⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        197⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        198⤵
        
        PID:6336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        199⤵
        
        PID:6352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        200⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        201⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        202⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        203⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        204⤵
        
        PID:6424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        205⤵
        
        PID:6440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        206⤵
        
        PID:6456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        207⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        208⤵
        
        PID:6488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        209⤵
        
        PID:6500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        210⤵
        
        PID:6516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        211⤵
        
        PID:6560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        212⤵
        
        PID:6592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        213⤵
        
        PID:6612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        214⤵
        
        PID:6628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        215⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        216⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        217⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        218⤵
        
        PID:6688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        219⤵
        
        PID:6700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        220⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        221⤵
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        222⤵
        
        PID:6748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        223⤵
        
        PID:6760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        224⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        225⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        226⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        227⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        228⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        229⤵
        
        PID:6852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        230⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        231⤵
        
        PID:6880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        232⤵
        
        PID:6896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        233⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        234⤵
        
        PID:6928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        235⤵
        
        PID:6944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        236⤵
        
        PID:6960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        237⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        238⤵
        
        PID:6992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        239⤵
        
        PID:7008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        240⤵
        
        PID:7024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        241⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        242⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        243⤵
        
        PID:7068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        244⤵
        
        PID:7080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        245⤵
        
        PID:7096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        246⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        247⤵
        
        PID:7124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        248⤵
        
        PID:7144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        249⤵
        
        PID:7160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        250⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        251⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        252⤵
        
        PID:7212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        253⤵
        
        PID:7228
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        254⤵
        
        PID:7260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        255⤵
        
        PID:7300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        256⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        257⤵
        
        PID:7356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        258⤵
        
        PID:7388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        259⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        260⤵
        
        PID:7468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        261⤵
        
        PID:7484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        262⤵
        
        PID:7504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        263⤵
        
        PID:7520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        264⤵
        
        PID:7536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        265⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        266⤵
        
        PID:7588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        267⤵
        
        PID:7604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        268⤵
        
        PID:7616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        269⤵
        
        PID:7632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        270⤵
        
        PID:7644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        271⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        272⤵
        
        PID:7676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        273⤵
        
        PID:7692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        274⤵
        
        PID:7704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        275⤵
        
        PID:7720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        276⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        277⤵
        
        PID:7748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        278⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        279⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        280⤵
        
        PID:7788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        281⤵
        
        PID:7804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        282⤵
        
        PID:7820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        283⤵
        
        PID:7836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        284⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        285⤵
        
        PID:7868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        286⤵
        
        PID:7884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        287⤵
        
        PID:7900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        288⤵
        
        PID:7916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        289⤵
        
        PID:7932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        290⤵
        
        PID:7944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        291⤵
        
        PID:7960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        292⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        293⤵
        
        PID:7992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        294⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        295⤵
        
        PID:8024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        296⤵
        
        PID:8044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        297⤵
        
        PID:8060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        298⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        299⤵
        
        PID:8100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        300⤵
        
        PID:8112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        301⤵
        
        PID:8128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        302⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        303⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        304⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        305⤵
        
        PID:8188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        306⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        307⤵
        
        PID:8220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        308⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        309⤵
        
        PID:8252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        310⤵
        
        PID:8268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        311⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        312⤵
        
        PID:8296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        313⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        314⤵
        
        PID:8324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        315⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        316⤵
        
        PID:8356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        317⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        318⤵
        
        PID:8380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        319⤵
        
        PID:8392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        320⤵
        
        PID:8408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        321⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        322⤵
        
        PID:8440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        323⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        324⤵
        
        PID:8472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        325⤵
        
        PID:8488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        326⤵
        
        PID:8504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        327⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        328⤵
        
        PID:8536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        329⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        330⤵
        
        PID:8564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        331⤵
        
        PID:8580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        332⤵
        
        PID:8596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        333⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        334⤵
        
        PID:8624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        335⤵
        
        PID:8640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        336⤵
        
        PID:8656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        337⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        338⤵
        
        PID:8688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        339⤵
        
        PID:8700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        340⤵
        
        PID:8712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        341⤵
        
        PID:8728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        342⤵
        
        PID:8744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        343⤵
        
        PID:8756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        344⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        345⤵
        
        PID:8792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        346⤵
        
        PID:8808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        347⤵
        
        PID:8824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        348⤵
        
        PID:8840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        349⤵
        
        PID:8856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        350⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        351⤵
        
        PID:8884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        352⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        353⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        354⤵
        
        PID:8932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        355⤵
        
        PID:8948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        356⤵
        
        PID:8964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        357⤵
        
        PID:8980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        358⤵
        
        PID:8996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        359⤵
        
        PID:9012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        360⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        361⤵
        
        PID:9044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        362⤵
        
        PID:9060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        363⤵
        
        PID:9076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        364⤵
        
        PID:9092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        365⤵
        
        PID:9108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        366⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        367⤵
        
        PID:9140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        368⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        369⤵
        
        PID:9172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        370⤵
        
        PID:9188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        371⤵
        
        PID:9204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        372⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        373⤵
        
        PID:9232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        374⤵
        
        PID:9244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        375⤵
        
        PID:9264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        376⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        377⤵
        
        PID:9292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        378⤵
        
        PID:9308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        379⤵
        
        PID:9324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        380⤵
        
        PID:9340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        381⤵
        
        PID:9352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        382⤵
        
        PID:9368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        383⤵
        
        PID:9384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        384⤵
        
        PID:9396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        385⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        386⤵
        
        PID:9440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        387⤵
        
        PID:9480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        388⤵
        
        PID:9492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        389⤵
        
        PID:9508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        390⤵
        
        PID:9524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        391⤵
        
        PID:9540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        392⤵
        
        PID:9552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        393⤵
        
        PID:9568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        394⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        395⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        396⤵
        
        PID:9616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        397⤵
        
        PID:9632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        398⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        399⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        400⤵
        
        PID:9676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        401⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        402⤵
        
        PID:9708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        403⤵
        
        PID:9724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        404⤵
        
        PID:9740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        405⤵
        
        PID:9756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        406⤵
        
        PID:9772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        407⤵
        
        PID:9788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        408⤵
        
        PID:9800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        409⤵
        
        PID:9820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        410⤵
        
        PID:9836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        411⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        412⤵
        
        PID:9864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        413⤵
        
        PID:9880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        414⤵
        
        PID:9892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        415⤵
        
        PID:9904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        416⤵
        
        PID:9916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        417⤵
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        418⤵
        
        PID:9952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        419⤵
        
        PID:9968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        420⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        421⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        422⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        423⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        424⤵
        
        PID:10040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        425⤵
        
        PID:10056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        426⤵
        
        PID:10072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        427⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        428⤵
        
        PID:10104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        429⤵
        
        PID:10120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        430⤵
        
        PID:10136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        431⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        432⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        433⤵
        
        PID:10184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        434⤵
        
        PID:10200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        435⤵
        
        PID:10216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        436⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        437⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        438⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        439⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        440⤵
        
        PID:10288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        441⤵
        
        PID:10304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        442⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        443⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        444⤵
        
        PID:10348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        445⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        446⤵
        
        PID:10376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        447⤵
        
        PID:10392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        448⤵
        
        PID:10408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        449⤵
        
        PID:10424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        450⤵
        
        PID:10436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        451⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        452⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        453⤵
        
        PID:10484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        454⤵
        
        PID:10500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        455⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        456⤵
        
        PID:10528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        457⤵
        
        PID:10540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        458⤵
        
        PID:10556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        459⤵
        
        PID:10572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        460⤵
        
        PID:10588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        461⤵
        
        PID:10604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        462⤵
        
        PID:10616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        463⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        464⤵
        
        PID:10648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        465⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        466⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        467⤵
        
        PID:10700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        468⤵
        
        PID:10716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        469⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        470⤵
        
        PID:10744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        471⤵
        
        PID:10760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        472⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        473⤵
        
        PID:10792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        474⤵
        
        PID:10804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        475⤵
        
        PID:10820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        476⤵
        
        PID:10836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        477⤵
        
        PID:10852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        478⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        479⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        480⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        481⤵
        
        PID:10912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        482⤵
        
        PID:10924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        483⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        484⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        485⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        486⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        487⤵
        
        PID:10996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        488⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        489⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        490⤵
        
        PID:11048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        491⤵
        
        PID:11064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        492⤵
        
        PID:11080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        493⤵
        
        PID:11096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        494⤵
        
        PID:11112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        495⤵
        
        PID:11128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        496⤵
        
        PID:11144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        497⤵
        
        PID:11160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        498⤵
        
        PID:11176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        499⤵
        
        PID:11192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        500⤵
        
        PID:11208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        501⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        502⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        503⤵
        
        PID:11256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        504⤵
        
        PID:11272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        505⤵
        
        PID:11288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        506⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        507⤵
        
        PID:11320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        508⤵
        
        PID:11336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        509⤵
        
        PID:11352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        510⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        511⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        512⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        513⤵
        
        PID:11412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        514⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        515⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        516⤵
        
        PID:11460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        517⤵
        
        PID:11476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        518⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        519⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        520⤵
        
        PID:11524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        521⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        522⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        523⤵
        
        PID:11632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        524⤵
        
        PID:11652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        525⤵
        
        PID:11700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        526⤵
        
        PID:11736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        527⤵
        
        PID:11752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        528⤵
        
        PID:11768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        529⤵
        
        PID:11796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        530⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        531⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        532⤵
        
        PID:11852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        533⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        534⤵
        
        PID:11884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        535⤵
        
        PID:11900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        536⤵
        
        PID:11916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        537⤵
        
        PID:11932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        538⤵
        
        PID:11948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        539⤵
        
        PID:11964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        540⤵
        
        PID:11980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        541⤵
        
        PID:11992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        542⤵
        
        PID:12008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        543⤵
        
        PID:12024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        544⤵
        
        PID:12040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        545⤵
        
        PID:12056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        546⤵
        
        PID:12072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        547⤵
        
        PID:12084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        548⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        549⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        550⤵
        
        PID:12128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        551⤵
        
        PID:12140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        552⤵
        
        PID:12152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        553⤵
        
        PID:12168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        554⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        555⤵
        
        PID:12200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        556⤵
        
        PID:12216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        557⤵
        
        PID:12232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        558⤵
        
        PID:12244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        559⤵
        
        PID:12260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        560⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        561⤵
        
        PID:11552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        562⤵
        
        PID:12304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        563⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        564⤵
        
        PID:12336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        565⤵
        
        PID:12352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        566⤵
        
        PID:12368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        567⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        568⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        569⤵
        
        PID:12412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        570⤵
        
        PID:12428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        571⤵
        
        PID:12444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        572⤵
        
        PID:12460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        573⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        574⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        575⤵
        
        PID:12512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        576⤵
        
        PID:12532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        577⤵
        
        PID:12548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        578⤵
        
        PID:12564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        579⤵
        
        PID:12580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        580⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        581⤵
        
        PID:12612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        582⤵
        
        PID:12628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        583⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        584⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        585⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        586⤵
        
        PID:12688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        587⤵
        
        PID:12704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        588⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        589⤵
        
        PID:12736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        590⤵
        
        PID:12752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        591⤵
        
        PID:12768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        592⤵
        
        PID:12784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        593⤵
        
        PID:12800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        594⤵
        
        PID:12816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        595⤵
        
        PID:12832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        596⤵
        
        PID:12844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        597⤵
        
        PID:12856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        598⤵
        
        PID:12872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        599⤵
        
        PID:12888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        600⤵
        
        PID:12904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        601⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        602⤵
        
        PID:12936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        603⤵
        
        PID:12952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        604⤵
        
        PID:12964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        605⤵
        
        PID:12976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        606⤵
        
        PID:12992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        607⤵
        
        PID:13008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        608⤵
        
        PID:13024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        609⤵
        
        PID:13040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        610⤵
        
        PID:13052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        611⤵
        
        PID:13068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        612⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        613⤵
        
        PID:13104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        614⤵
        
        PID:13120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        615⤵
        
        PID:13136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        616⤵
        
        PID:13152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        617⤵
        
        PID:13168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        618⤵
        
        PID:13184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        619⤵
        
        PID:13200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        620⤵
        
        PID:13216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        621⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        622⤵
        
        PID:13252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        623⤵
        
        PID:13268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        624⤵
        
        PID:13280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        625⤵
        
        PID:13300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        626⤵
        
        PID:11512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        627⤵
        
        PID:4524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        628⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        629⤵
        
        PID:13340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        630⤵
        
        PID:13356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        631⤵
        
        PID:13372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        632⤵
        
        PID:13388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        633⤵
        
        PID:13404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        634⤵
        
        PID:13420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        635⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        636⤵
        
        PID:13448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        637⤵
        
        PID:13464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        638⤵
        
        PID:13480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        639⤵
        
        PID:13496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        640⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        641⤵
        
        PID:13524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        642⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        643⤵
        
        PID:13560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        644⤵
        
        PID:13576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        645⤵
        
        PID:13588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        646⤵
        
        PID:13604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        647⤵
        
        PID:13620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        648⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        649⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        650⤵
        
        PID:13680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        651⤵
        
        PID:13712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        652⤵
        
        PID:13728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        653⤵
        
        PID:13744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        654⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        655⤵
        
        PID:13772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        656⤵
        
        PID:13788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        657⤵
        
        PID:13804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        658⤵
        
        PID:13820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        659⤵
        
        PID:13840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        660⤵
        
        PID:13852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        661⤵
        
        PID:13868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        662⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        663⤵
        
        PID:13904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        664⤵
        
        PID:13932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        665⤵
        
        PID:13948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        666⤵
        
        PID:13964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        667⤵
        
        PID:13980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        668⤵
        
        PID:13996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        669⤵
        
        PID:14016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        670⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        671⤵
        
        PID:14048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        672⤵
        
        PID:14072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        673⤵
        
        PID:14084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        674⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        675⤵
        
        PID:14112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        676⤵
        
        PID:14128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        677⤵
        
        PID:14144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        678⤵
        
        PID:14160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        679⤵
        
        PID:14176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        680⤵
        
        PID:14188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        681⤵
        
        PID:14200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        682⤵
        
        PID:14220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        683⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        684⤵
        
        PID:14248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        685⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        686⤵
        
        PID:14276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        687⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        688⤵
        
        PID:14304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        689⤵
        
        PID:14320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        690⤵
        
        PID:14332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        691⤵
        
        PID:13892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        692⤵
        
        PID:7196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        693⤵
        
        PID:7200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        694⤵
        
        PID:6528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        695⤵
        
        PID:6536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        696⤵
        
        PID:13928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        697⤵
        
        PID:14340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        698⤵
        
        PID:14360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        699⤵
        
        PID:14376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        700⤵
        
        PID:14392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        701⤵
        
        PID:14404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        702⤵
        
        PID:14420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        703⤵
        
        PID:14432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        704⤵
        
        PID:14444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        705⤵
        
        PID:14456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        706⤵
        
        PID:14472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        707⤵
        
        PID:14488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        708⤵
        
        PID:14504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        709⤵
        
        PID:14520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        710⤵
        
        PID:14536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        711⤵
        
        PID:14552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        712⤵
        
        PID:14568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        713⤵
        
        PID:14584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        714⤵
        
        PID:14600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        715⤵
        
        PID:14612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        716⤵
        
        PID:14624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        717⤵
        
        PID:14636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        718⤵
        
        PID:14648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        719⤵
        
        PID:14664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        720⤵
        
        PID:14680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        721⤵
        
        PID:14696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        722⤵
        
        PID:14716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        723⤵
        
        PID:14732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        724⤵
        
        PID:14744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        725⤵
        
        PID:14756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        726⤵
        
        PID:14768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        727⤵
        
        PID:14784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        728⤵
        
        PID:14800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        729⤵
        
        PID:14812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        730⤵
        
        PID:14828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        731⤵
        
        PID:14844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        732⤵
        
        PID:14860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        733⤵
        
        PID:14876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        734⤵
        
        PID:14892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        735⤵
        
        PID:14908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        736⤵
        
        PID:14920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        737⤵
        
        PID:14936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        738⤵
        
        PID:14956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        739⤵
        
        PID:14972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        740⤵
        
        PID:14984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        741⤵
        
        PID:15000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        742⤵
        
        PID:15016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        743⤵
        
        PID:15032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        744⤵
        
        PID:15044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        745⤵
        
        PID:15060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        746⤵
        
        PID:15076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        747⤵
        
        PID:15100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        748⤵
        
        PID:15116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        749⤵
        
        PID:15128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        750⤵
        
        PID:15140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        751⤵
        
        PID:15152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        752⤵
        
        PID:15168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        753⤵
        
        PID:15184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        754⤵
        
        PID:15200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        755⤵
        
        PID:15216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        756⤵
        
        PID:15232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        757⤵
        
        PID:15248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        758⤵
        
        PID:15264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        759⤵
        
        PID:15280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        760⤵
        
        PID:15292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        761⤵
        
        PID:15308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        762⤵
        
        PID:15324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        763⤵
        
        PID:15340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        764⤵
        
        PID:15352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        765⤵
        
        PID:5036
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        766⤵
        
        PID:3788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        767⤵
        
        PID:15372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        768⤵
        
        PID:15388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        769⤵
        
        PID:15400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        770⤵
        
        PID:15412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        771⤵
        
        PID:15428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        772⤵
        
        PID:15444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        773⤵
        
        PID:15460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        774⤵
        
        PID:15476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        775⤵
        
        PID:15492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        776⤵
        
        PID:15508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        777⤵
        
        PID:15524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        778⤵
        
        PID:15536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        779⤵
        
        PID:15552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        780⤵
        
        PID:15564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        781⤵
        
        PID:15580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        782⤵
        
        PID:15592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        783⤵
        
        PID:15608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        784⤵
        
        PID:15624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        785⤵
        
        PID:15640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        786⤵
        
        PID:15652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        787⤵
        
        PID:15664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        788⤵
        
        PID:15680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        789⤵
        
        PID:15696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        790⤵
        
        PID:15712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        791⤵
        
        PID:15728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        792⤵
        
        PID:15744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        793⤵
        
        PID:15760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        794⤵
        
        PID:15776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        795⤵
        
        PID:15796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        796⤵
        
        PID:15812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        797⤵
        
        PID:15828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        798⤵
        
        PID:15844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        799⤵
        
        PID:15860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        800⤵
        
        PID:15876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        801⤵
        
        PID:15892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        802⤵
        
        PID:15908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        803⤵
        
        PID:15920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        804⤵
        
        PID:15936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        805⤵
        
        PID:15952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        806⤵
        
        PID:15964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        807⤵
        
        PID:15976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        808⤵
        
        PID:15992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        809⤵
        
        PID:16008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        810⤵
        
        PID:16024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        811⤵
        
        PID:16040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        812⤵
        
        PID:16056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        813⤵
        
        PID:16072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        814⤵
        
        PID:16088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        815⤵
        
        PID:16100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        816⤵
        
        PID:16116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        817⤵
        
        PID:16128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        818⤵
        
        PID:16144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        819⤵
        
        PID:16156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        820⤵
        
        PID:16172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        821⤵
        
        PID:16188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        822⤵
        
        PID:16204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        823⤵
        
        PID:16224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        824⤵
        
        PID:16240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        825⤵
        
        PID:16256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        826⤵
        
        PID:16272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        827⤵
        
        PID:16288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        828⤵
        
        PID:16304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        829⤵
        
        PID:16316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        830⤵
        
        PID:16332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        831⤵
        
        PID:16348
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        832⤵
        
        PID:16364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        833⤵
        
        PID:16376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        834⤵
        
        PID:2308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        835⤵
        
        PID:1160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        836⤵
        
        PID:7460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        837⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        838⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        839⤵
        
        PID:4700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        840⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        841⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        842⤵
        
        PID:464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        843⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        844⤵
        
        PID:16388
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        845⤵
        
        PID:16404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        846⤵
        
        PID:16420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        847⤵
        
        PID:16436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        848⤵
        
        PID:16452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        849⤵
        
        PID:16468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        850⤵
        
        PID:16484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        851⤵
        
        PID:16496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        852⤵
        
        PID:16516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        853⤵
        
        PID:16528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        854⤵
        
        PID:16540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        855⤵
        
        PID:16556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        856⤵
        
        PID:16576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        857⤵
        
        PID:16592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        858⤵
        
        PID:16608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        859⤵
        
        PID:16624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        860⤵
        
        PID:16636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        861⤵
        
        PID:16652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        862⤵
        
        PID:16668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        863⤵
        
        PID:16684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        864⤵
        
        PID:16696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        865⤵
        
        PID:16712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        866⤵
        
        PID:16728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        867⤵
        
        PID:16744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        868⤵
        
        PID:16756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        869⤵
        
        PID:16772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        870⤵
        
        PID:16788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        871⤵
        
        PID:16804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        872⤵
        
        PID:16820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        873⤵
        
        PID:16832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2728-11-0x0000000003DF0000-0x0000000004C81000-memory.dll,#1
        874⤵
        
        PID:16848

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads