41a3036043e77876e59c3844202b643cf396d83e6fef3cc94e2015e63817f6fb

Analysis

max time kernel
112s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01/03/2024, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2984-11-0x0000000004000000-0x0000000004E91000-memory.dll
Size 14.6MB
Sample240301-pypr7sgc74
SHA256 41a3036043e77876e59c3844202b643cf396d83e6fef3cc94e2015e63817f6fb
MD5 c974a9b190cd9b423aeaaef2bdefdaee
SHA1 175df0666fbe6084f1cfcc94e1b341df5ba344ac
SHA512 4b2659c3c65d31d00dfddd1cead11616be90cb7536e143931933e28eb2f59297bf2366c546aa1cc3e16f32932c432002f1ca8563202927990c1c93acdb7f8116
SSDEEP 196608:nLUipF5Xcu4GSObe7XQrsQQkEC3SQJoZoTeaXf6:nLZFCuzSM4jkEC3S4oZb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 1404	2272	rundll32.exe	93
PID 2272 wrote to memory of 1404	2272	rundll32.exe	93
PID 2272 wrote to memory of 1404	2272	rundll32.exe	93
PID 1404 wrote to memory of 1488	1404	rundll32.exe	95
PID 1404 wrote to memory of 1488	1404	rundll32.exe	95
PID 1404 wrote to memory of 1488	1404	rundll32.exe	95
PID 1488 wrote to memory of 4212	1488	rundll32.exe	96
PID 1488 wrote to memory of 4212	1488	rundll32.exe	96
PID 1488 wrote to memory of 4212	1488	rundll32.exe	96
PID 4212 wrote to memory of 5004	4212	rundll32.exe	97
PID 4212 wrote to memory of 5004	4212	rundll32.exe	97
PID 4212 wrote to memory of 5004	4212	rundll32.exe	97
PID 5004 wrote to memory of 1604	5004	rundll32.exe	98
PID 5004 wrote to memory of 1604	5004	rundll32.exe	98
PID 5004 wrote to memory of 1604	5004	rundll32.exe	98
PID 1604 wrote to memory of 3032	1604	rundll32.exe	99
PID 1604 wrote to memory of 3032	1604	rundll32.exe	99
PID 1604 wrote to memory of 3032	1604	rundll32.exe	99
PID 3032 wrote to memory of 5112	3032	rundll32.exe	101
PID 3032 wrote to memory of 5112	3032	rundll32.exe	101
PID 3032 wrote to memory of 5112	3032	rundll32.exe	101
PID 5112 wrote to memory of 2624	5112	rundll32.exe	102
PID 5112 wrote to memory of 2624	5112	rundll32.exe	102
PID 5112 wrote to memory of 2624	5112	rundll32.exe	102
PID 2624 wrote to memory of 4824	2624	rundll32.exe	103
PID 2624 wrote to memory of 4824	2624	rundll32.exe	103
PID 2624 wrote to memory of 4824	2624	rundll32.exe	103
PID 4824 wrote to memory of 4284	4824	rundll32.exe	104
PID 4824 wrote to memory of 4284	4824	rundll32.exe	104
PID 4824 wrote to memory of 4284	4824	rundll32.exe	104
PID 4284 wrote to memory of 3512	4284	rundll32.exe	105
PID 4284 wrote to memory of 3512	4284	rundll32.exe	105
PID 4284 wrote to memory of 3512	4284	rundll32.exe	105
PID 3512 wrote to memory of 4560	3512	rundll32.exe	106
PID 3512 wrote to memory of 4560	3512	rundll32.exe	106
PID 3512 wrote to memory of 4560	3512	rundll32.exe	106
PID 4560 wrote to memory of 928	4560	rundll32.exe	107
PID 4560 wrote to memory of 928	4560	rundll32.exe	107
PID 4560 wrote to memory of 928	4560	rundll32.exe	107
PID 928 wrote to memory of 2872	928	rundll32.exe	108
PID 928 wrote to memory of 2872	928	rundll32.exe	108
PID 928 wrote to memory of 2872	928	rundll32.exe	108
PID 2872 wrote to memory of 1768	2872	rundll32.exe	109
PID 2872 wrote to memory of 1768	2872	rundll32.exe	109
PID 2872 wrote to memory of 1768	2872	rundll32.exe	109
PID 1768 wrote to memory of 992	1768	rundll32.exe	110
PID 1768 wrote to memory of 992	1768	rundll32.exe	110
PID 1768 wrote to memory of 992	1768	rundll32.exe	110
PID 992 wrote to memory of 3764	992	rundll32.exe	111
PID 992 wrote to memory of 3764	992	rundll32.exe	111
PID 992 wrote to memory of 3764	992	rundll32.exe	111
PID 3764 wrote to memory of 4044	3764	rundll32.exe	112
PID 3764 wrote to memory of 4044	3764	rundll32.exe	112
PID 3764 wrote to memory of 4044	3764	rundll32.exe	112
PID 4044 wrote to memory of 4396	4044	rundll32.exe	113
PID 4044 wrote to memory of 4396	4044	rundll32.exe	113
PID 4044 wrote to memory of 4396	4044	rundll32.exe	113
PID 4396 wrote to memory of 780	4396	rundll32.exe	114
PID 4396 wrote to memory of 780	4396	rundll32.exe	114
PID 4396 wrote to memory of 780	4396	rundll32.exe	114
PID 780 wrote to memory of 1536	780	rundll32.exe	115
PID 780 wrote to memory of 1536	780	rundll32.exe	115
PID 780 wrote to memory of 1536	780	rundll32.exe	115
PID 1536 wrote to memory of 1384	1536	rundll32.exe	116

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1404
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1488
  - - C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4212
    - - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:5004
      - C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:1604
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:5112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:2624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:3512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:4560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:2872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:4044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:4396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:1536
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        23⤵
        
        PID:1384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        24⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        25⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        26⤵
        
        PID:548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        27⤵
        
        PID:2344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        28⤵
        
        PID:1068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        29⤵
        
        PID:748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        30⤵
        
        PID:984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        31⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        32⤵
        
        PID:2340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        33⤵
        
        PID:1772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        34⤵
        
        PID:1728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        35⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        36⤵
        
        PID:1172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        37⤵
        
        PID:4924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        38⤵
        
        PID:3432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        39⤵
        
        PID:1844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        40⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        41⤵
        
        PID:1456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        42⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        43⤵
        
        PID:1236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        44⤵
        
        PID:4380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        45⤵
        
        PID:4256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        46⤵
        
        PID:4988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        47⤵
        
        PID:3084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        48⤵
        
        PID:3316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        49⤵
        
        PID:3648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        50⤵
        
        PID:3716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        51⤵
        
        PID:2156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        52⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        53⤵
        
        PID:5068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        54⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        55⤵
        
        PID:3820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        56⤵
        
        PID:4088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        57⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        58⤵
        
        PID:3980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        59⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        60⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        61⤵
        
        PID:4548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        62⤵
        
        PID:5124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        63⤵
        
        PID:5136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        64⤵
        
        PID:5152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        65⤵
        
        PID:5164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        66⤵
        
        PID:5176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        67⤵
        
        PID:5188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        68⤵
        
        PID:5208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        69⤵
        
        PID:5220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        70⤵
        
        PID:5232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        71⤵
        
        PID:5248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        72⤵
        
        PID:5260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        73⤵
        
        PID:5272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        74⤵
        
        PID:5284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        75⤵
        
        PID:5296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        76⤵
        
        PID:5312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        77⤵
        
        PID:5324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        78⤵
        
        PID:5336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        79⤵
        
        PID:5352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        80⤵
        
        PID:5368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        81⤵
        
        PID:5380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        82⤵
        
        PID:5396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        83⤵
        
        PID:5408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        84⤵
        
        PID:5420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        85⤵
        
        PID:5440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        86⤵
        
        PID:5456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        87⤵
        
        PID:5472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        88⤵
        
        PID:5484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        89⤵
        
        PID:5496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        90⤵
        
        PID:5512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        91⤵
        
        PID:5528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        92⤵
        
        PID:5540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        93⤵
        
        PID:5556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        94⤵
        
        PID:5572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        95⤵
        
        PID:5588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        96⤵
        
        PID:5600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        97⤵
        
        PID:5612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        98⤵
        
        PID:5624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        99⤵
        
        PID:5640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        100⤵
        
        PID:5652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        101⤵
        
        PID:5668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        102⤵
        
        PID:5680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        103⤵
        
        PID:5692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        104⤵
        
        PID:5708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        105⤵
        
        PID:5724
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        106⤵
        
        PID:5740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        107⤵
        
        PID:5756
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        108⤵
        
        PID:5772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        109⤵
        
        PID:5784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        110⤵
        
        PID:5796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        111⤵
        
        PID:5808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        112⤵
        
        PID:5824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        113⤵
        
        PID:5836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        114⤵
        
        PID:5852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        115⤵
        
        PID:5868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        116⤵
        
        PID:5880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        117⤵
        
        PID:5892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        118⤵
        
        PID:5904
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        119⤵
        
        PID:5916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        120⤵
        
        PID:5932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        121⤵
        
        PID:5948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        122⤵
        
        PID:5964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        123⤵
        
        PID:5976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        124⤵
        
        PID:5988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        125⤵
        
        PID:6000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        126⤵
        
        PID:6012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        127⤵
        
        PID:6024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        128⤵
        
        PID:6044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        129⤵
        
        PID:6056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        130⤵
        
        PID:6068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        131⤵
        
        PID:6080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        132⤵
        
        PID:6096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        133⤵
        
        PID:6112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        134⤵
        
        PID:6128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        135⤵
        
        PID:6140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        136⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        137⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        138⤵
        
        PID:1716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        139⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        140⤵
        
        PID:1548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        141⤵
        
        PID:4600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        142⤵
        
        PID:1128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        143⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        144⤵
        
        PID:716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        145⤵
        
        PID:2700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        146⤵
        
        PID:5768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        147⤵
        
        PID:6148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        148⤵
        
        PID:6164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        149⤵
        
        PID:6180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        150⤵
        
        PID:6192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        151⤵
        
        PID:6204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        152⤵
        
        PID:6220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        153⤵
        
        PID:6236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        154⤵
        
        PID:6248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        155⤵
        
        PID:6264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        156⤵
        
        PID:6280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        157⤵
        
        PID:6292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        158⤵
        
        PID:6304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        159⤵
        
        PID:6320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        160⤵
        
        PID:6332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        161⤵
        
        PID:6344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        162⤵
        
        PID:6356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        163⤵
        
        PID:6372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        164⤵
        
        PID:6384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        165⤵
        
        PID:6396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        166⤵
        
        PID:6412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        167⤵
        
        PID:6424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        168⤵
        
        PID:6440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        169⤵
        
        PID:6452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        170⤵
        
        PID:6468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        171⤵
        
        PID:6480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        172⤵
        
        PID:6496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        173⤵
        
        PID:6512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        174⤵
        
        PID:6524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        175⤵
        
        PID:6540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        176⤵
        
        PID:6556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        177⤵
        
        PID:6568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        178⤵
        
        PID:6580
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        179⤵
        
        PID:6592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        180⤵
        
        PID:6608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        181⤵
        
        PID:6620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        182⤵
        
        PID:6632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        183⤵
        
        PID:6644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        184⤵
        
        PID:6660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        185⤵
        
        PID:6672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        186⤵
        
        PID:6684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        187⤵
        
        PID:6696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        188⤵
        
        PID:6708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        189⤵
        
        PID:6720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        190⤵
        
        PID:6732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        191⤵
        
        PID:6752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        192⤵
        
        PID:6764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        193⤵
        
        PID:6776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        194⤵
        
        PID:6792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        195⤵
        
        PID:6804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        196⤵
        
        PID:6820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        197⤵
        
        PID:6836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        198⤵
        
        PID:6848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        199⤵
        
        PID:6864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        200⤵
        
        PID:6876
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        201⤵
        
        PID:6900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        202⤵
        
        PID:6912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        203⤵
        
        PID:6924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        204⤵
        
        PID:6936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        205⤵
        
        PID:6948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        206⤵
        
        PID:6964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        207⤵
        
        PID:6984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        208⤵
        
        PID:6996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        209⤵
        
        PID:7008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        210⤵
        
        PID:7020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        211⤵
        
        PID:7040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        212⤵
        
        PID:7052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        213⤵
        
        PID:7064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        214⤵
        
        PID:7076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        215⤵
        
        PID:7092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        216⤵
        
        PID:7108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        217⤵
        
        PID:7120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        218⤵
        
        PID:7132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        219⤵
        
        PID:7148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        220⤵
        
        PID:7160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        221⤵
        
        PID:6460
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        222⤵
        
        PID:7176
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        223⤵
        
        PID:7192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        224⤵
        
        PID:7208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        225⤵
        
        PID:7220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        226⤵
        
        PID:7232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        227⤵
        
        PID:7244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        228⤵
        
        PID:7256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        229⤵
        
        PID:7268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        230⤵
        
        PID:7284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        231⤵
        
        PID:7296
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        232⤵
        
        PID:7312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        233⤵
        
        PID:7324
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        234⤵
        
        PID:7340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        235⤵
        
        PID:7352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        236⤵
        
        PID:7368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        237⤵
        
        PID:7380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        238⤵
        
        PID:7396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        239⤵
        
        PID:7408
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        240⤵
        
        PID:7424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        241⤵
        
        PID:7436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        242⤵
        
        PID:7452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        243⤵
        
        PID:7464
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        244⤵
        
        PID:7476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        245⤵
        
        PID:7500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        246⤵
        
        PID:7516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        247⤵
        
        PID:7528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        248⤵
        
        PID:7540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        249⤵
        
        PID:7556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        250⤵
        
        PID:7572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        251⤵
        
        PID:7584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        252⤵
        
        PID:7600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        253⤵
        
        PID:7612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        254⤵
        
        PID:7628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        255⤵
        
        PID:7640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        256⤵
        
        PID:7652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        257⤵
        
        PID:7668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        258⤵
        
        PID:7680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        259⤵
        
        PID:7696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        260⤵
        
        PID:7712
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        261⤵
        
        PID:7728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        262⤵
        
        PID:7744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        263⤵
        
        PID:7760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        264⤵
        
        PID:7772
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        265⤵
        
        PID:7784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        266⤵
        
        PID:7796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        267⤵
        
        PID:7808
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        268⤵
        
        PID:7824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        269⤵
        
        PID:7840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        270⤵
        
        PID:7852
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        271⤵
        
        PID:7872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        272⤵
        
        PID:7884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        273⤵
        
        PID:7896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        274⤵
        
        PID:7908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        275⤵
        
        PID:7920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        276⤵
        
        PID:7936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        277⤵
        
        PID:7956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        278⤵
        
        PID:7968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        279⤵
        
        PID:7980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        280⤵
        
        PID:7996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        281⤵
        
        PID:8012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        282⤵
        
        PID:8024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        283⤵
        
        PID:8040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        284⤵
        
        PID:8056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        285⤵
        
        PID:8068
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        286⤵
        
        PID:8080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        287⤵
        
        PID:8092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        288⤵
        
        PID:8104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        289⤵
        
        PID:8116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        290⤵
        
        PID:8132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        291⤵
        
        PID:8144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        292⤵
        
        PID:8160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        293⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        294⤵
        
        PID:8184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        295⤵
        
        PID:7304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        296⤵
        
        PID:8196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        297⤵
        
        PID:8212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        298⤵
        
        PID:8224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        299⤵
        
        PID:8236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        300⤵
        
        PID:8248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        301⤵
        
        PID:8260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        302⤵
        
        PID:8272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        303⤵
        
        PID:8284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        304⤵
        
        PID:8300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        305⤵
        
        PID:8312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        306⤵
        
        PID:8328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        307⤵
        
        PID:8344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        308⤵
        
        PID:8356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        309⤵
        
        PID:8368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        310⤵
        
        PID:8384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        311⤵
        
        PID:8396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        312⤵
        
        PID:8416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        313⤵
        
        PID:8432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        314⤵
        
        PID:8444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        315⤵
        
        PID:8456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        316⤵
        
        PID:8468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        317⤵
        
        PID:8480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        318⤵
        
        PID:8492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        319⤵
        
        PID:8508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        320⤵
        
        PID:8520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        321⤵
        
        PID:8532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        322⤵
        
        PID:8548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        323⤵
        
        PID:8560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        324⤵
        
        PID:8572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        325⤵
        
        PID:8584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        326⤵
        
        PID:8596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        327⤵
        
        PID:8608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        328⤵
        
        PID:8620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        329⤵
        
        PID:8636
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        330⤵
        
        PID:8652
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        331⤵
        
        PID:8664
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        332⤵
        
        PID:8676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        333⤵
        
        PID:8692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        334⤵
        
        PID:8704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        335⤵
        
        PID:8720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        336⤵
        
        PID:8736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        337⤵
        
        PID:8784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        338⤵
        
        PID:8816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        339⤵
        
        PID:8828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        340⤵
        
        PID:8888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        341⤵
        
        PID:8916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        342⤵
        
        PID:8964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        343⤵
        
        PID:8992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        344⤵
        
        PID:9008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        345⤵
        
        PID:9028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        346⤵
        
        PID:9048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        347⤵
        
        PID:9064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        348⤵
        
        PID:9076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        349⤵
        
        PID:9096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        350⤵
        
        PID:9112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        351⤵
        
        PID:9124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        352⤵
        
        PID:9136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        353⤵
        
        PID:9156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        354⤵
        
        PID:9180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        355⤵
        
        PID:9192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        356⤵
        
        PID:9208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        357⤵
        
        PID:8404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        358⤵
        
        PID:4908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        359⤵
        
        PID:2084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        360⤵
        
        PID:4696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        361⤵
        
        PID:9220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        362⤵
        
        PID:9236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        363⤵
        
        PID:9248
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        364⤵
        
        PID:9264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        365⤵
        
        PID:9276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        366⤵
        
        PID:9288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        367⤵
        
        PID:9300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        368⤵
        
        PID:9316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        369⤵
        
        PID:9328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        370⤵
        
        PID:9344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        371⤵
        
        PID:9360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        372⤵
        
        PID:9376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        373⤵
        
        PID:9392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        374⤵
        
        PID:9404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        375⤵
        
        PID:9420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        376⤵
        
        PID:9432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        377⤵
        
        PID:9444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        378⤵
        
        PID:9456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        379⤵
        
        PID:9468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        380⤵
        
        PID:9484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        381⤵
        
        PID:9500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        382⤵
        
        PID:9512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        383⤵
        
        PID:9532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        384⤵
        
        PID:9544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        385⤵
        
        PID:9560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        386⤵
        
        PID:9572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        387⤵
        
        PID:9584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        388⤵
        
        PID:9600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        389⤵
        
        PID:9612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        390⤵
        
        PID:9628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        391⤵
        
        PID:9648
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        392⤵
        
        PID:9660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        393⤵
        
        PID:9680
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        394⤵
        
        PID:9704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        395⤵
        
        PID:9720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        396⤵
        
        PID:9732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        397⤵
        
        PID:9752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        398⤵
        
        PID:9768
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        399⤵
        
        PID:9780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        400⤵
        
        PID:9792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        401⤵
        
        PID:9804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        402⤵
        
        PID:9816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        403⤵
        
        PID:9832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        404⤵
        
        PID:9848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        405⤵
        
        PID:9860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        406⤵
        
        PID:9872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        407⤵
        
        PID:9884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        408⤵
        
        PID:9900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        409⤵
        
        PID:9916
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        410⤵
        
        PID:9936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        411⤵
        
        PID:9948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        412⤵
        
        PID:9964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        413⤵
        
        PID:9980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        414⤵
        
        PID:9996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        415⤵
        
        PID:10012
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        416⤵
        
        PID:10028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        417⤵
        
        PID:10044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        418⤵
        
        PID:10056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        419⤵
        
        PID:10072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        420⤵
        
        PID:10088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        421⤵
        
        PID:10100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        422⤵
        
        PID:10116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        423⤵
        
        PID:10128
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        424⤵
        
        PID:10140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        425⤵
        
        PID:10152
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        426⤵
        
        PID:10168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        427⤵
        
        PID:10180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        428⤵
        
        PID:10192
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        429⤵
        
        PID:10208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        430⤵
        
        PID:10224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        431⤵
        
        PID:1188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        432⤵
        
        PID:9668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        433⤵
        
        PID:8776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        434⤵
        
        PID:8796
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        435⤵
        
        PID:9084
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        436⤵
        
        PID:9692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        437⤵
        
        PID:10244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        438⤵
        
        PID:10260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        439⤵
        
        PID:10276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        440⤵
        
        PID:10292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        441⤵
        
        PID:10308
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        442⤵
        
        PID:10320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        443⤵
        
        PID:10332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        444⤵
        
        PID:10344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        445⤵
        
        PID:10360
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        446⤵
        
        PID:10372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        447⤵
        
        PID:10384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        448⤵
        
        PID:10400
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        449⤵
        
        PID:10416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        450⤵
        
        PID:10428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        451⤵
        
        PID:10440
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        452⤵
        
        PID:10452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        453⤵
        
        PID:10468
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        454⤵
        
        PID:10480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        455⤵
        
        PID:10496
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        456⤵
        
        PID:10512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        457⤵
        
        PID:10528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        458⤵
        
        PID:10540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        459⤵
        
        PID:10552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        460⤵
        
        PID:10568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        461⤵
        
        PID:10584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        462⤵
        
        PID:10596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        463⤵
        
        PID:10608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        464⤵
        
        PID:10620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        465⤵
        
        PID:10632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        466⤵
        
        PID:10644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        467⤵
        
        PID:10656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        468⤵
        
        PID:10668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        469⤵
        
        PID:10684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        470⤵
        
        PID:10696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        471⤵
        
        PID:10708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        472⤵
        
        PID:10720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        473⤵
        
        PID:10732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        474⤵
        
        PID:10748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        475⤵
        
        PID:10764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        476⤵
        
        PID:10776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        477⤵
        
        PID:10788
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        478⤵
        
        PID:10800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        479⤵
        
        PID:10816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        480⤵
        
        PID:10828
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        481⤵
        
        PID:10840
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        482⤵
        
        PID:10856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        483⤵
        
        PID:10868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        484⤵
        
        PID:10884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        485⤵
        
        PID:10896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        486⤵
        
        PID:10908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        487⤵
        
        PID:10920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        488⤵
        
        PID:10944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        489⤵
        
        PID:10956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        490⤵
        
        PID:10968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        491⤵
        
        PID:10984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        492⤵
        
        PID:11000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        493⤵
        
        PID:11016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        494⤵
        
        PID:11032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        495⤵
        
        PID:11048
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        496⤵
        
        PID:11060
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        497⤵
        
        PID:11076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        498⤵
        
        PID:11092
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        499⤵
        
        PID:11108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        500⤵
        
        PID:11120
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        501⤵
        
        PID:11132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        502⤵
        
        PID:11148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        503⤵
        
        PID:11164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        504⤵
        
        PID:11180
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        505⤵
        
        PID:11200
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        506⤵
        
        PID:11212
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        507⤵
        
        PID:11224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        508⤵
        
        PID:11240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        509⤵
        
        PID:11252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        510⤵
        
        PID:10232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        511⤵
        
        PID:10676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        512⤵
        
        PID:3448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        513⤵
        
        PID:2600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        514⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        515⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        516⤵
        
        PID:432
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        517⤵
        
        PID:2436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        518⤵
        
        PID:3516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        519⤵
        
        PID:2564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        520⤵
        
        PID:3160
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        521⤵
        
        PID:2136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        522⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        523⤵
        
        PID:10940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        524⤵
        
        PID:2188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        525⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        526⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        527⤵
        
        PID:1568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        528⤵
        
        PID:2976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        529⤵
        
        PID:2928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        530⤵
        
        PID:3124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        531⤵
        
        PID:2380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        532⤵
        
        PID:2596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        533⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        534⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        535⤵
        
        PID:2644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        536⤵
        
        PID:11232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        537⤵
        
        PID:4620
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        538⤵
        
        PID:8864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        539⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        540⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        541⤵
        
        PID:2052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        542⤵
        
        PID:3260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        543⤵
        
        PID:4056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        544⤵
        
        PID:2776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        545⤵
        
        PID:2992
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        546⤵
        
        PID:2448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        547⤵
        
        PID:5172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        548⤵
        
        PID:11280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        549⤵
        
        PID:11292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        550⤵
        
        PID:11304
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        551⤵
        
        PID:11316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        552⤵
        
        PID:11332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        553⤵
        
        PID:11344
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        554⤵
        
        PID:11356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        555⤵
        
        PID:11368
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        556⤵
        
        PID:11384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        557⤵
        
        PID:11396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        558⤵
        
        PID:11412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        559⤵
        
        PID:11428
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        560⤵
        
        PID:11444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        561⤵
        
        PID:11456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        562⤵
        
        PID:11472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        563⤵
        
        PID:11488
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        564⤵
        
        PID:11504
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        565⤵
        
        PID:11516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        566⤵
        
        PID:11532
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        567⤵
        
        PID:11544
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        568⤵
        
        PID:11560
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        569⤵
        
        PID:11572
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        570⤵
        
        PID:11588
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        571⤵
        
        PID:11600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        572⤵
        
        PID:11612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        573⤵
        
        PID:11628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        574⤵
        
        PID:11644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        575⤵
        
        PID:11660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        576⤵
        
        PID:11672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        577⤵
        
        PID:11684
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        578⤵
        
        PID:11696
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        579⤵
        
        PID:11716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        580⤵
        
        PID:11728
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        581⤵
        
        PID:11740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        582⤵
        
        PID:11752
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        583⤵
        
        PID:11764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        584⤵
        
        PID:11780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        585⤵
        
        PID:11800
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        586⤵
        
        PID:11816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        587⤵
        
        PID:11832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        588⤵
        
        PID:11844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        589⤵
        
        PID:11856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        590⤵
        
        PID:11868
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        591⤵
        
        PID:11880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        592⤵
        
        PID:11896
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        593⤵
        
        PID:11908
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        594⤵
        
        PID:11920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        595⤵
        
        PID:11940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        596⤵
        
        PID:11956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        597⤵
        
        PID:12000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        598⤵
        
        PID:12016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        599⤵
        
        PID:12032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        600⤵
        
        PID:12044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        601⤵
        
        PID:12056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        602⤵
        
        PID:12072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        603⤵
        
        PID:12088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        604⤵
        
        PID:12100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        605⤵
        
        PID:12112
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        606⤵
        
        PID:12124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        607⤵
        
        PID:12140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        608⤵
        
        PID:12156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        609⤵
        
        PID:12172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        610⤵
        
        PID:12184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        611⤵
        
        PID:12204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        612⤵
        
        PID:12224
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        613⤵
        
        PID:12240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        614⤵
        
        PID:12252
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        615⤵
        
        PID:12264
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        616⤵
        
        PID:12276
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        617⤵
        
        PID:5184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        618⤵
        
        PID:5216
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        619⤵
        
        PID:5240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        620⤵
        
        PID:5280
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        621⤵
        
        PID:5332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        622⤵
        
        PID:5364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        623⤵
        
        PID:5392
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        624⤵
        
        PID:5416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        625⤵
        
        PID:5452
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        626⤵
        
        PID:5480
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        627⤵
        
        PID:5508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        628⤵
        
        PID:5524
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        629⤵
        
        PID:5552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        630⤵
        
        PID:5564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        631⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        632⤵
        
        PID:5632
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        633⤵
        
        PID:5660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        634⤵
        
        PID:5676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        635⤵
        
        PID:5700
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        636⤵
        
        PID:5732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        637⤵
        
        PID:5764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        638⤵
        
        PID:208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        639⤵
        
        PID:5816
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        640⤵
        
        PID:5860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        641⤵
        
        PID:5888
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        642⤵
        
        PID:5928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        643⤵
        
        PID:5944
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        644⤵
        
        PID:5960
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        645⤵
        
        PID:5996
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        646⤵
        
        PID:6040
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        647⤵
        
        PID:6076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        648⤵
        
        PID:6104
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        649⤵
        
        PID:6136
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        650⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        651⤵
        
        PID:3920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        652⤵
        
        PID:12080
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        653⤵
        
        PID:436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        654⤵
        
        PID:6032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        655⤵
        
        PID:6188
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        656⤵
        
        PID:6232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        657⤵
        
        PID:6260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        658⤵
        
        PID:6272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        659⤵
        
        PID:6312
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        660⤵
        
        PID:6340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        661⤵
        
        PID:6380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        662⤵
        
        PID:6404
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        663⤵
        
        PID:6448
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        664⤵
        
        PID:6492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        665⤵
        
        PID:6520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        666⤵
        
        PID:6552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        667⤵
        
        PID:6576
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        668⤵
        
        PID:6600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        669⤵
        
        PID:6640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        670⤵
        
        PID:5864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        671⤵
        
        PID:6716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        672⤵
        
        PID:6744
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        673⤵
        
        PID:6784
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        674⤵
        
        PID:6856
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        675⤵
        
        PID:12300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        676⤵
        
        PID:12332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        677⤵
        
        PID:12356
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        678⤵
        
        PID:12372
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        679⤵
        
        PID:12396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        680⤵
        
        PID:12420
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        681⤵
        
        PID:12436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        682⤵
        
        PID:12456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        683⤵
        
        PID:12476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        684⤵
        
        PID:12492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        685⤵
        
        PID:12508
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        686⤵
        
        PID:12528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        687⤵
        
        PID:12548
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        688⤵
        
        PID:12568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        689⤵
        
        PID:12584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        690⤵
        
        PID:12596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        691⤵
        
        PID:12612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        692⤵
        
        PID:12628
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        693⤵
        
        PID:12644
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        694⤵
        
        PID:12660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        695⤵
        
        PID:12676
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        696⤵
        
        PID:12692
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        697⤵
        
        PID:12708
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        698⤵
        
        PID:12720
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        699⤵
        
        PID:12748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        700⤵
        
        PID:12764
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        701⤵
        
        PID:12776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        702⤵
        
        PID:12792
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        703⤵
        
        PID:12804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        704⤵
        
        PID:12824
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        705⤵
        
        PID:12836
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        706⤵
        
        PID:12848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        707⤵
        
        PID:12864
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        708⤵
        
        PID:12880
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        709⤵
        
        PID:12892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        710⤵
        
        PID:12920
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        711⤵
        
        PID:12932
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        712⤵
        
        PID:12952
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        713⤵
        
        PID:12968
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        714⤵
        
        PID:12980
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        715⤵
        
        PID:13000
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        716⤵
        
        PID:13016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        717⤵
        
        PID:13032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        718⤵
        
        PID:13044
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        719⤵
        
        PID:13056
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        720⤵
        
        PID:13076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        721⤵
        
        PID:13088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        722⤵
        
        PID:13108
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        723⤵
        
        PID:13124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        724⤵
        
        PID:13140
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        725⤵
        
        PID:13156
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        726⤵
        
        PID:13172
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        727⤵
        
        PID:13208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        728⤵
        
        PID:13236
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        729⤵
        
        PID:13256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        730⤵
        
        PID:13268
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        731⤵
        
        PID:13284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        732⤵
        
        PID:13300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        733⤵
        
        PID:6364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        734⤵
        
        PID:6976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        735⤵
        
        PID:7016
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        736⤵
        
        PID:7072
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        737⤵
        
        PID:7100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        738⤵
        
        PID:7144
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        739⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        740⤵
        
        PID:7184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        741⤵
        
        PID:7240
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        742⤵
        
        PID:7292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        743⤵
        
        PID:7332
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        744⤵
        
        PID:7376
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        745⤵
        
        PID:7416
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        746⤵
        
        PID:7444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        747⤵
        
        PID:7492
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        748⤵
        
        PID:1672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        749⤵
        
        PID:1964
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        750⤵
        
        PID:3028
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        751⤵
        
        PID:7552
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        752⤵
        
        PID:7596
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        753⤵
        
        PID:12380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        754⤵
        
        PID:12320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        755⤵
        
        PID:12384
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        756⤵
        
        PID:12444
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        757⤵
        
        PID:6872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        758⤵
        
        PID:7660
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        759⤵
        
        PID:7688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        760⤵
        
        PID:7704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        761⤵
        
        PID:7736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        762⤵
        
        PID:7780
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        763⤵
        
        PID:7820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        764⤵
        
        PID:7848
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        765⤵
        
        PID:7892
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        766⤵
        
        PID:7928
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        767⤵
        
        PID:7976
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        768⤵
        
        PID:8008
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        769⤵
        
        PID:8052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        770⤵
        
        PID:7512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        771⤵
        
        PID:4672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        772⤵
        
        PID:7740
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        773⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        774⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        775⤵
        
        PID:1284
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        776⤵
        
        PID:4336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        777⤵
        
        PID:8124
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        778⤵
        
        PID:8168
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        779⤵
        
        PID:7860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        780⤵
        
        PID:8204
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        781⤵
        
        PID:8256
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        782⤵
        
        PID:8292
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        783⤵
        
        PID:8340
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        784⤵
        
        PID:8364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        785⤵
        
        PID:8412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        786⤵
        
        PID:8424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        787⤵
        
        PID:13320
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        788⤵
        
        PID:13336
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        789⤵
        
        PID:13352
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        790⤵
        
        PID:13364
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        791⤵
        
        PID:13380
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        792⤵
        
        PID:13396
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        793⤵
        
        PID:13412
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        794⤵
        
        PID:13424
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        795⤵
        
        PID:13436
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        796⤵
        
        PID:13456
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        797⤵
        
        PID:13472
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        798⤵
        
        PID:13484
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        799⤵
        
        PID:13500
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        800⤵
        
        PID:13512
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        801⤵
        
        PID:13528
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        802⤵
        
        PID:13540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        803⤵
        
        PID:13556
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        804⤵
        
        PID:13568
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        805⤵
        
        PID:13584
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        806⤵
        
        PID:13600
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        807⤵
        
        PID:13612
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        808⤵
        
        PID:13624
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        809⤵
        
        PID:13640
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        810⤵
        
        PID:13656
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        811⤵
        
        PID:13668
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        812⤵
        
        PID:13688
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        813⤵
        
        PID:13704
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        814⤵
        
        PID:13736
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        815⤵
        
        PID:13748
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        816⤵
        
        PID:13760
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        817⤵
        
        PID:13776
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        818⤵
        
        PID:13804
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        819⤵
        
        PID:13820
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        820⤵
        
        PID:13832
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        821⤵
        
        PID:13844
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        822⤵
        
        PID:13860
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        823⤵
        
        PID:13872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        824⤵
        
        PID:13884
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        825⤵
        
        PID:13900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        826⤵
        
        PID:13912
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        827⤵
        
        PID:13924
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        828⤵
        
        PID:13940
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        829⤵
        
        PID:13956
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        830⤵
        
        PID:13972
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        831⤵
        
        PID:13988
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        832⤵
        
        PID:14004
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        833⤵
        
        PID:14020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        834⤵
        
        PID:14032
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        835⤵
        
        PID:14052
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        836⤵
        
        PID:14064
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        837⤵
        
        PID:14076
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        838⤵
        
        PID:14088
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        839⤵
        
        PID:14100
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        840⤵
        
        PID:14116
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        841⤵
        
        PID:14132
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        842⤵
        
        PID:14148
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        843⤵
        
        PID:14164
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        844⤵
        
        PID:14184
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        845⤵
        
        PID:14196
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        846⤵
        
        PID:14208
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        847⤵
        
        PID:14220
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        848⤵
        
        PID:14232
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        849⤵
        
        PID:14244
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        850⤵
        
        PID:14260
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        851⤵
        
        PID:14272
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        852⤵
        
        PID:14288
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        853⤵
        
        PID:14300
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        854⤵
        
        PID:14316
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        855⤵
        
        PID:14328
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        856⤵
        
        PID:8476
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        857⤵
        
        PID:8516
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        858⤵
        
        PID:8540
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        859⤵
        
        PID:8592
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        860⤵
        
        PID:8616
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        861⤵
        
        PID:8672
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        862⤵
        
        PID:8716
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        863⤵
        
        PID:8732
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        864⤵
        
        PID:3024
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        865⤵
        
        PID:8812
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        866⤵
        
        PID:8872
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        867⤵
        
        PID:8900
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        868⤵
        
        PID:8984
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        869⤵
        
        PID:9020
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        870⤵
        
        PID:13520
        
        C:\Windows\SysWOW64\rundll32.exe
        
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984-11-0x0000000004000000-0x0000000004E91000-memory.dll,#1
        871⤵
        
        PID:13732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=2228,i,521073434451423547,2311651514500527526,262144 --variations-seed-version /prefetch:8
1⤵
PID:11928

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads