8680837cefa0baf00e77919cc01f39d421649012c5f5370fdf04be4ebc006274

General

Target

1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll
Size

6.4MB
MD5

c842f250d6855a0182937ccc80a01f52
SHA1

9dd46c4f12344d620d4564675846e44cdaaea668
SHA256

8680837cefa0baf00e77919cc01f39d421649012c5f5370fdf04be4ebc006274
SHA512

5e8b7ce9c57e1960f56f5ac65dd8249596400c694999aede9df08d368010b83412dccc0c035a02cb62526e461fcf6969d4f5eeb57e3cb44b99acdf41cc5060cf

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

rundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exe

description	pid	process	target process
PID 1672 wrote to memory of 1868	1672	rundll32.exe	rundll32.exe
PID 1672 wrote to memory of 1868	1672	rundll32.exe	rundll32.exe
PID 1672 wrote to memory of 1868	1672	rundll32.exe	rundll32.exe
PID 1868 wrote to memory of 1372	1868	rundll32.exe	rundll32.exe
PID 1868 wrote to memory of 1372	1868	rundll32.exe	rundll32.exe
PID 1868 wrote to memory of 1372	1868	rundll32.exe	rundll32.exe
PID 1372 wrote to memory of 2152	1372	rundll32.exe	rundll32.exe
PID 1372 wrote to memory of 2152	1372	rundll32.exe	rundll32.exe
PID 1372 wrote to memory of 2152	1372	rundll32.exe	rundll32.exe
PID 2152 wrote to memory of 2352	2152	rundll32.exe	rundll32.exe
PID 2152 wrote to memory of 2352	2152	rundll32.exe	rundll32.exe
PID 2152 wrote to memory of 2352	2152	rundll32.exe	rundll32.exe
PID 2352 wrote to memory of 2524	2352	rundll32.exe	rundll32.exe
PID 2352 wrote to memory of 2524	2352	rundll32.exe	rundll32.exe
PID 2352 wrote to memory of 2524	2352	rundll32.exe	rundll32.exe
PID 2524 wrote to memory of 2784	2524	rundll32.exe	rundll32.exe
PID 2524 wrote to memory of 2784	2524	rundll32.exe	rundll32.exe
PID 2524 wrote to memory of 2784	2524	rundll32.exe	rundll32.exe
PID 2784 wrote to memory of 2792	2784	rundll32.exe	rundll32.exe
PID 2784 wrote to memory of 2792	2784	rundll32.exe	rundll32.exe
PID 2784 wrote to memory of 2792	2784	rundll32.exe	rundll32.exe
PID 2792 wrote to memory of 4396	2792	rundll32.exe	rundll32.exe
PID 2792 wrote to memory of 4396	2792	rundll32.exe	rundll32.exe
PID 2792 wrote to memory of 4396	2792	rundll32.exe	rundll32.exe
PID 4396 wrote to memory of 3388	4396	rundll32.exe	rundll32.exe
PID 4396 wrote to memory of 3388	4396	rundll32.exe	rundll32.exe
PID 4396 wrote to memory of 3388	4396	rundll32.exe	rundll32.exe
PID 3388 wrote to memory of 4996	3388	rundll32.exe	rundll32.exe
PID 3388 wrote to memory of 4996	3388	rundll32.exe	rundll32.exe
PID 3388 wrote to memory of 4996	3388	rundll32.exe	rundll32.exe
PID 4996 wrote to memory of 4344	4996	rundll32.exe	rundll32.exe
PID 4996 wrote to memory of 4344	4996	rundll32.exe	rundll32.exe
PID 4996 wrote to memory of 4344	4996	rundll32.exe	rundll32.exe
PID 4344 wrote to memory of 1196	4344	rundll32.exe	rundll32.exe
PID 4344 wrote to memory of 1196	4344	rundll32.exe	rundll32.exe
PID 4344 wrote to memory of 1196	4344	rundll32.exe	rundll32.exe
PID 1196 wrote to memory of 4124	1196	rundll32.exe	rundll32.exe
PID 1196 wrote to memory of 4124	1196	rundll32.exe	rundll32.exe
PID 1196 wrote to memory of 4124	1196	rundll32.exe	rundll32.exe
PID 4124 wrote to memory of 4272	4124	rundll32.exe	rundll32.exe
PID 4124 wrote to memory of 4272	4124	rundll32.exe	rundll32.exe
PID 4124 wrote to memory of 4272	4124	rundll32.exe	rundll32.exe
PID 4272 wrote to memory of 4216	4272	rundll32.exe	rundll32.exe
PID 4272 wrote to memory of 4216	4272	rundll32.exe	rundll32.exe
PID 4272 wrote to memory of 4216	4272	rundll32.exe	rundll32.exe
PID 4216 wrote to memory of 1708	4216	rundll32.exe	rundll32.exe
PID 4216 wrote to memory of 1708	4216	rundll32.exe	rundll32.exe
PID 4216 wrote to memory of 1708	4216	rundll32.exe	rundll32.exe
PID 1708 wrote to memory of 1576	1708	rundll32.exe	rundll32.exe
PID 1708 wrote to memory of 1576	1708	rundll32.exe	rundll32.exe
PID 1708 wrote to memory of 1576	1708	rundll32.exe	rundll32.exe
PID 1576 wrote to memory of 2680	1576	rundll32.exe	rundll32.exe
PID 1576 wrote to memory of 2680	1576	rundll32.exe	rundll32.exe
PID 1576 wrote to memory of 2680	1576	rundll32.exe	rundll32.exe
PID 2680 wrote to memory of 4128	2680	rundll32.exe	rundll32.exe
PID 2680 wrote to memory of 4128	2680	rundll32.exe	rundll32.exe
PID 2680 wrote to memory of 4128	2680	rundll32.exe	rundll32.exe
PID 4128 wrote to memory of 4284	4128	rundll32.exe	rundll32.exe
PID 4128 wrote to memory of 4284	4128	rundll32.exe	rundll32.exe
PID 4128 wrote to memory of 4284	4128	rundll32.exe	rundll32.exe
PID 4284 wrote to memory of 4596	4284	rundll32.exe	rundll32.exe
PID 4284 wrote to memory of 4596	4284	rundll32.exe	rundll32.exe
PID 4284 wrote to memory of 4596	4284	rundll32.exe	rundll32.exe
PID 4596 wrote to memory of 4488	4596	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
2⤵
- Suspicious use of WriteProcessMemory
PID:1868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
3⤵
- Suspicious use of WriteProcessMemory
PID:1372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
4⤵
- Suspicious use of WriteProcessMemory
PID:2152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
5⤵
- Suspicious use of WriteProcessMemory
PID:2352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
6⤵
- Suspicious use of WriteProcessMemory
PID:2524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
7⤵
- Suspicious use of WriteProcessMemory
PID:2784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
8⤵
- Suspicious use of WriteProcessMemory
PID:2792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
9⤵
- Suspicious use of WriteProcessMemory
PID:4396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
10⤵
- Suspicious use of WriteProcessMemory
PID:3388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
11⤵
- Suspicious use of WriteProcessMemory
PID:4996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
12⤵
- Suspicious use of WriteProcessMemory
PID:4344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
13⤵
- Suspicious use of WriteProcessMemory
PID:1196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
14⤵
- Suspicious use of WriteProcessMemory
PID:4124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
15⤵
- Suspicious use of WriteProcessMemory
PID:4272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
16⤵
- Suspicious use of WriteProcessMemory
PID:4216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
17⤵
- Suspicious use of WriteProcessMemory
PID:1708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
18⤵
- Suspicious use of WriteProcessMemory
PID:1576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
19⤵
- Suspicious use of WriteProcessMemory
PID:2680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
20⤵
- Suspicious use of WriteProcessMemory
PID:4128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
21⤵
- Suspicious use of WriteProcessMemory
PID:4284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
22⤵
- Suspicious use of WriteProcessMemory
PID:4596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
23⤵
PID:4488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
24⤵
PID:2408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
25⤵
PID:4780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
26⤵
PID:3384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
27⤵
PID:4064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
28⤵
PID:2176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
29⤵
PID:2260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
30⤵
PID:5060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
31⤵
PID:4224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
32⤵
PID:3180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
33⤵
PID:4084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
34⤵
PID:1288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
35⤵
PID:4324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
36⤵
PID:1348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
37⤵
PID:1324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
38⤵
PID:1552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
39⤵
PID:2292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
40⤵
PID:3940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
41⤵
PID:1528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
42⤵
PID:2904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
43⤵
PID:4212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
44⤵
PID:4912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
45⤵
PID:4948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
46⤵
PID:828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
47⤵
PID:4840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
48⤵
PID:4836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
49⤵
PID:3756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
50⤵
PID:5048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
51⤵
PID:4056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
52⤵
PID:220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
53⤵
PID:448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
54⤵
PID:4180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
55⤵
PID:1720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
56⤵
PID:4988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
57⤵
PID:3288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
58⤵
PID:3428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
59⤵
PID:3164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
60⤵
PID:3680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
61⤵
PID:3468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
62⤵
PID:4172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
63⤵
PID:3668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
64⤵
PID:4012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
65⤵
PID:4696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
66⤵
PID:2320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
67⤵
PID:3224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
68⤵
PID:2956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
69⤵
PID:1824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
70⤵
PID:648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
71⤵
PID:3588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
72⤵
PID:4764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
73⤵
PID:4176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
74⤵
PID:460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
75⤵
PID:972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
76⤵
PID:1300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
77⤵
PID:472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
78⤵
PID:1344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
79⤵
PID:1416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
80⤵
PID:1076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
81⤵
PID:1444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
82⤵
PID:672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
83⤵
PID:1932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
84⤵
PID:2008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
85⤵
PID:64

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
86⤵
PID:4040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
87⤵
PID:3944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
88⤵
PID:916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
89⤵
PID:3660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
90⤵
PID:2052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
91⤵
PID:2772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
92⤵
PID:5040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
93⤵
PID:5104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
94⤵
PID:4980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
95⤵
PID:464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
96⤵
PID:1304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
97⤵
PID:2736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
98⤵
PID:1384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
99⤵
PID:2416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
100⤵
PID:2392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
101⤵
PID:1680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
102⤵
PID:4184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
103⤵
PID:1448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
104⤵
PID:4232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
105⤵
PID:3328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
106⤵
PID:4156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
107⤵
PID:1772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
108⤵
PID:3704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
109⤵
PID:4860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
110⤵
PID:4052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
111⤵
PID:4848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
112⤵
PID:3112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
113⤵
PID:2776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
114⤵
PID:3972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
115⤵
PID:3392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
116⤵
PID:5136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
117⤵
PID:5152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
118⤵
PID:5168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
119⤵
PID:5184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
120⤵
PID:5200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
121⤵
PID:5216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
122⤵
PID:5228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
123⤵
PID:5240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
124⤵
PID:5256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
125⤵
PID:5272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
126⤵
PID:5288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
127⤵
PID:5304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
128⤵
PID:5320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
129⤵
PID:5336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
130⤵
PID:5348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
131⤵
PID:5360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
132⤵
PID:5372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
133⤵
PID:5384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
134⤵
PID:5396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
135⤵
PID:5412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
136⤵
PID:5428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
137⤵
PID:5444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
138⤵
PID:5460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
139⤵
PID:5476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
140⤵
PID:5488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
141⤵
PID:5500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
142⤵
PID:5516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
143⤵
PID:5528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
144⤵
PID:5540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
145⤵
PID:5556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
146⤵
PID:5572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
147⤵
PID:5588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
148⤵
PID:5604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
149⤵
PID:5616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
150⤵
PID:5632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
151⤵
PID:5648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
152⤵
PID:5664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
153⤵
PID:5680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
154⤵
PID:5696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
155⤵
PID:5712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
156⤵
PID:5728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
157⤵
PID:5744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
158⤵
PID:5760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
159⤵
PID:5776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
160⤵
PID:5792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
161⤵
PID:5808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
162⤵
PID:5824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
163⤵
PID:5840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
164⤵
PID:5852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
165⤵
PID:5868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
166⤵
PID:5884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
167⤵
PID:5900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
168⤵
PID:5916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
169⤵
PID:5932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
170⤵
PID:5944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
171⤵
PID:5960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
172⤵
PID:5976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
173⤵
PID:5992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
174⤵
PID:6008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
175⤵
PID:6024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
176⤵
PID:6040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
177⤵
PID:6056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
178⤵
PID:6072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
179⤵
PID:6088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
180⤵
PID:6104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
181⤵
PID:6120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
182⤵
PID:6132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
183⤵
PID:2316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
184⤵
PID:6148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
185⤵
PID:6164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
186⤵
PID:6180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
187⤵
PID:6196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
188⤵
PID:6212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
189⤵
PID:6228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
190⤵
PID:6244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
191⤵
PID:6260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
192⤵
PID:6276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
193⤵
PID:6292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
194⤵
PID:6308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
195⤵
PID:6320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
196⤵
PID:6336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
197⤵
PID:6352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
198⤵
PID:6368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
199⤵
PID:6384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
200⤵
PID:6400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
201⤵
PID:6416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
202⤵
PID:6432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
203⤵
PID:6448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
204⤵
PID:6464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
205⤵
PID:6480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
206⤵
PID:6496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
207⤵
PID:6512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
208⤵
PID:6524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
209⤵
PID:6540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
210⤵
PID:6552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
211⤵
PID:6568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
212⤵
PID:6584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
213⤵
PID:6600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
214⤵
PID:6616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
215⤵
PID:6632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
216⤵
PID:6648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
217⤵
PID:6664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
218⤵
PID:6680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
219⤵
PID:6696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
220⤵
PID:6712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
221⤵
PID:6728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
222⤵
PID:6744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
223⤵
PID:6760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
224⤵
PID:6776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
225⤵
PID:6792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
226⤵
PID:6808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
227⤵
PID:6820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
228⤵
PID:6836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
229⤵
PID:6852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
230⤵
PID:6868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
231⤵
PID:6884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
232⤵
PID:6900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
233⤵
PID:6916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
234⤵
PID:6928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
235⤵
PID:6944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
236⤵
PID:6960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
237⤵
PID:6976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
238⤵
PID:6992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
239⤵
PID:7008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
240⤵
PID:7024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
241⤵
PID:7040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
242⤵
PID:7056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
243⤵
PID:7072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
244⤵
PID:7088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
245⤵
PID:7100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
246⤵
PID:7116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
247⤵
PID:7132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
248⤵
PID:7144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
249⤵
PID:7160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
250⤵
PID:1748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
251⤵
PID:7180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
252⤵
PID:7196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
253⤵
PID:7212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
254⤵
PID:7228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
255⤵
PID:7244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
256⤵
PID:7256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
257⤵
PID:7272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
258⤵
PID:7284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
259⤵
PID:7300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
260⤵
PID:7316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
261⤵
PID:7332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
262⤵
PID:7348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
263⤵
PID:7364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
264⤵
PID:7376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
265⤵
PID:7392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
266⤵
PID:7408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
267⤵
PID:7424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
268⤵
PID:7436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
269⤵
PID:7452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
270⤵
PID:7464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
271⤵
PID:7480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
272⤵
PID:7496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
273⤵
PID:7512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
274⤵
PID:7528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
275⤵
PID:7544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
276⤵
PID:7556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
277⤵
PID:7572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
278⤵
PID:7588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
279⤵
PID:7600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
280⤵
PID:7620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
281⤵
PID:7636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
282⤵
PID:7652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
283⤵
PID:7664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
284⤵
PID:7680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
285⤵
PID:7700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
286⤵
PID:7712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
287⤵
PID:7728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
288⤵
PID:7744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
289⤵
PID:7760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
290⤵
PID:7776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
291⤵
PID:7792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
292⤵
PID:7808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
293⤵
PID:7824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
294⤵
PID:7840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
295⤵
PID:7852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
296⤵
PID:7872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
297⤵
PID:7888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
298⤵
PID:7904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
299⤵
PID:7920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
300⤵
PID:7936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
301⤵
PID:7952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
302⤵
PID:7968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
303⤵
PID:7984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
304⤵
PID:8000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
305⤵
PID:8012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
306⤵
PID:8032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
307⤵
PID:8048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
308⤵
PID:8060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
309⤵
PID:8076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
310⤵
PID:8088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
311⤵
PID:8108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
312⤵
PID:8124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
313⤵
PID:8136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
314⤵
PID:8152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
315⤵
PID:8164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
316⤵
PID:8180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
317⤵
PID:5084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
318⤵
PID:4976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
319⤵
PID:5080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
320⤵
PID:8196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
321⤵
PID:8208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
322⤵
PID:8224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
323⤵
PID:8240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
324⤵
PID:8252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
325⤵
PID:8264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
326⤵
PID:8276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
327⤵
PID:8292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
328⤵
PID:8308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
329⤵
PID:8324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
330⤵
PID:8340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
331⤵
PID:8356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
332⤵
PID:8372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
333⤵
PID:8388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
334⤵
PID:8404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
335⤵
PID:8420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
336⤵
PID:8436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
337⤵
PID:8452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
338⤵
PID:8468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
339⤵
PID:8484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
340⤵
PID:8500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
341⤵
PID:8516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
342⤵
PID:8532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
343⤵
PID:8548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
344⤵
PID:8564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
345⤵
PID:8576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
346⤵
PID:8588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
347⤵
PID:8600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
348⤵
PID:8612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
349⤵
PID:8624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
350⤵
PID:8636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
351⤵
PID:8648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
352⤵
PID:8664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
353⤵
PID:8680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
354⤵
PID:8696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
355⤵
PID:8712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
356⤵
PID:8728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
357⤵
PID:8740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
358⤵
PID:8756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
359⤵
PID:8772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
360⤵
PID:8784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
361⤵
PID:8800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
362⤵
PID:8812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
363⤵
PID:8828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
364⤵
PID:8844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
365⤵
PID:8860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
366⤵
PID:8876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
367⤵
PID:8892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
368⤵
PID:8908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
369⤵
PID:8924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
370⤵
PID:8940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
371⤵
PID:8956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
372⤵
PID:8968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
373⤵
PID:8984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
374⤵
PID:8996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
375⤵
PID:9008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
376⤵
PID:9024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
377⤵
PID:9040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
378⤵
PID:9056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
379⤵
PID:9072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
380⤵
PID:9088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
381⤵
PID:9104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
382⤵
PID:9116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
383⤵
PID:9136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
384⤵
PID:9152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
385⤵
PID:9168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
386⤵
PID:9180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
387⤵
PID:9200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
388⤵
PID:3492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
389⤵
PID:9228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
390⤵
PID:9244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
391⤵
PID:9260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
392⤵
PID:9272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
393⤵
PID:9288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
394⤵
PID:9304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
395⤵
PID:9316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
396⤵
PID:9332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
397⤵
PID:9344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
398⤵
PID:9360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
399⤵
PID:9376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
400⤵
PID:9392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
401⤵
PID:9408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
402⤵
PID:9424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
403⤵
PID:9440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
404⤵
PID:9456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
405⤵
PID:9472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
406⤵
PID:9484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
407⤵
PID:9504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
408⤵
PID:9520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
409⤵
PID:9536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
410⤵
PID:9552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
411⤵
PID:9568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
412⤵
PID:9584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
413⤵
PID:9596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
414⤵
PID:9612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
415⤵
PID:9628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
416⤵
PID:9644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
417⤵
PID:9660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
418⤵
PID:9676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
419⤵
PID:9692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
420⤵
PID:9708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
421⤵
PID:9724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
422⤵
PID:9736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
423⤵
PID:9752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
424⤵
PID:9764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
425⤵
PID:9784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
426⤵
PID:9800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
427⤵
PID:9816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
428⤵
PID:9832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
429⤵
PID:9844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
430⤵
PID:9856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
431⤵
PID:9876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
432⤵
PID:9888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
433⤵
PID:9904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
434⤵
PID:9924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
435⤵
PID:9944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
436⤵
PID:9964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
437⤵
PID:9980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
438⤵
PID:9996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
439⤵
PID:10012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
440⤵
PID:10028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
441⤵
PID:10044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
442⤵
PID:10060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
443⤵
PID:10076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
444⤵
PID:10088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
445⤵
PID:10104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
446⤵
PID:10120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
447⤵
PID:10136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
448⤵
PID:10148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
449⤵
PID:10164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
450⤵
PID:10176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
451⤵
PID:10188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
452⤵
PID:10208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
453⤵
PID:10220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
454⤵
PID:10232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
455⤵
PID:10248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
456⤵
PID:10264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
457⤵
PID:10284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
458⤵
PID:10296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
459⤵
PID:10312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
460⤵
PID:10324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
461⤵
PID:10340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
462⤵
PID:10356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
463⤵
PID:10372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
464⤵
PID:10388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
465⤵
PID:10416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
466⤵
PID:10444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
467⤵
PID:10480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
468⤵
PID:10496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
469⤵
PID:10508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
470⤵
PID:10524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
471⤵
PID:10536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
472⤵
PID:10552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
473⤵
PID:10568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
474⤵
PID:10584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
475⤵
PID:10600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
476⤵
PID:10616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
477⤵
PID:10632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
478⤵
PID:10644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
479⤵
PID:10660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
480⤵
PID:10676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
481⤵
PID:10688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
482⤵
PID:10704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
483⤵
PID:10720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
484⤵
PID:10736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
485⤵
PID:10752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
486⤵
PID:10768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
487⤵
PID:10784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
488⤵
PID:10800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
489⤵
PID:10816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
490⤵
PID:10832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
491⤵
PID:10848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
492⤵
PID:10860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
493⤵
PID:10892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
494⤵
PID:10904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
495⤵
PID:10936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
496⤵
PID:10968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
497⤵
PID:11000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
498⤵
PID:11020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
499⤵
PID:11036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
500⤵
PID:11056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
501⤵
PID:11080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
502⤵
PID:11140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
503⤵
PID:11168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
504⤵
PID:11192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
505⤵
PID:11216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
506⤵
PID:11232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
507⤵
PID:11252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
508⤵
PID:10412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
509⤵
PID:11276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
510⤵
PID:11292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
511⤵
PID:11308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
512⤵
PID:11324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
513⤵
PID:11344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
514⤵
PID:11360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
515⤵
PID:11380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
516⤵
PID:11396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
517⤵
PID:11420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
518⤵
PID:11444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
519⤵
PID:11460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
520⤵
PID:11476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
521⤵
PID:11492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
522⤵
PID:11508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
523⤵
PID:11524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
524⤵
PID:11540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
525⤵
PID:11556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
526⤵
PID:11572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
527⤵
PID:11588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
528⤵
PID:11600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
529⤵
PID:11612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
530⤵
PID:11628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
531⤵
PID:11644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
532⤵
PID:11660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
533⤵
PID:11676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
534⤵
PID:11692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
535⤵
PID:11704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
536⤵
PID:11716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
537⤵
PID:11732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
538⤵
PID:11744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
539⤵
PID:11760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
540⤵
PID:11776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
541⤵
PID:11788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
542⤵
PID:11808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
543⤵
PID:11824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
544⤵
PID:11836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
545⤵
PID:11852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
546⤵
PID:11864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
547⤵
PID:11880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
548⤵
PID:11896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
549⤵
PID:11912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
550⤵
PID:11928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
551⤵
PID:11944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
552⤵
PID:11956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
553⤵
PID:11976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
554⤵
PID:11992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
555⤵
PID:12008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
556⤵
PID:12024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
557⤵
PID:12040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
558⤵
PID:12056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
559⤵
PID:12068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
560⤵
PID:12084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
561⤵
PID:12100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
562⤵
PID:12116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
563⤵
PID:12132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
564⤵
PID:12148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
565⤵
PID:12160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
566⤵
PID:12176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
567⤵
PID:12192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
568⤵
PID:12204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
569⤵
PID:12220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
570⤵
PID:12232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
571⤵
PID:12252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
572⤵
PID:12264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
573⤵
PID:12276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
574⤵
PID:12296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
575⤵
PID:12312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
576⤵
PID:12328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
577⤵
PID:12340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
578⤵
PID:12356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
579⤵
PID:12392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
580⤵
PID:12424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
581⤵
PID:12436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
582⤵
PID:12452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
583⤵
PID:12468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
584⤵
PID:12484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
585⤵
PID:12500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
586⤵
PID:12516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
587⤵
PID:12532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
588⤵
PID:12548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
589⤵
PID:12564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
590⤵
PID:12580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
591⤵
PID:12596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
592⤵
PID:12612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
593⤵
PID:12628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
594⤵
PID:12644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
595⤵
PID:12660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
596⤵
PID:12676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
597⤵
PID:12692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
598⤵
PID:12708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
599⤵
PID:12724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
600⤵
PID:12740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
601⤵
PID:12756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
602⤵
PID:12772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
603⤵
PID:12788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
604⤵
PID:12804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
605⤵
PID:12816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
606⤵
PID:12836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
607⤵
PID:12852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
608⤵
PID:12868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
609⤵
PID:12880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
610⤵
PID:12896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
611⤵
PID:12908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
612⤵
PID:12924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
613⤵
PID:12936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
614⤵
PID:12952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
615⤵
PID:12968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
616⤵
PID:12984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
617⤵
PID:13000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
618⤵
PID:13016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
619⤵
PID:13032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
620⤵
PID:13048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
621⤵
PID:13064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
622⤵
PID:13080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
623⤵
PID:13096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
624⤵
PID:13108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
625⤵
PID:13124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
626⤵
PID:13140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
627⤵
PID:13156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
628⤵
PID:13172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
629⤵
PID:13188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
630⤵
PID:13204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
631⤵
PID:13220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
632⤵
PID:13236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
633⤵
PID:13252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
634⤵
PID:13268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
635⤵
PID:13280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
636⤵
PID:13296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
637⤵
PID:12412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
638⤵
PID:13324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
639⤵
PID:13340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
640⤵
PID:13356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
641⤵
PID:13372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
642⤵
PID:13388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
643⤵
PID:13404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
644⤵
PID:13420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
645⤵
PID:13432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
646⤵
PID:13448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
647⤵
PID:13460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
648⤵
PID:13480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
649⤵
PID:13496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
650⤵
PID:13512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
651⤵
PID:13524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
652⤵
PID:13544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
653⤵
PID:13560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
654⤵
PID:13572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
655⤵
PID:13588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
656⤵
PID:13604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
657⤵
PID:13616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
658⤵
PID:13632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
659⤵
PID:13648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
660⤵
PID:13664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
661⤵
PID:13676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
662⤵
PID:13692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
663⤵
PID:13728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
664⤵
PID:13752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
665⤵
PID:13800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
666⤵
PID:13816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
667⤵
PID:13856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
668⤵
PID:13884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
669⤵
PID:13904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
670⤵
PID:13932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
671⤵
PID:13948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
672⤵
PID:13964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
673⤵
PID:13980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
674⤵
PID:13996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
675⤵
PID:14012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
676⤵
PID:14028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
677⤵
PID:14052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
678⤵
PID:14072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
679⤵
PID:14084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
680⤵
PID:14100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
681⤵
PID:14116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
682⤵
PID:14128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
683⤵
PID:14148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
684⤵
PID:14164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
685⤵
PID:14180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
686⤵
PID:14196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
687⤵
PID:14212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
688⤵
PID:14228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
689⤵
PID:14244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
690⤵
PID:14260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
691⤵
PID:14276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
692⤵
PID:14288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
693⤵
PID:14308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
694⤵
PID:14320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
695⤵
PID:13724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
696⤵
PID:14352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
697⤵
PID:14368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
698⤵
PID:14380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
699⤵
PID:14400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
700⤵
PID:14412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
701⤵
PID:14428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
702⤵
PID:14448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
703⤵
PID:14460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
704⤵
PID:14476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
705⤵
PID:14492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
706⤵
PID:14508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
707⤵
PID:14528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
708⤵
PID:14540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
709⤵
PID:14556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
710⤵
PID:14576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
711⤵
PID:14588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
712⤵
PID:14608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
713⤵
PID:14628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
714⤵
PID:14640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
715⤵
PID:14672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
716⤵
PID:14692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
717⤵
PID:14708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
718⤵
PID:14724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
719⤵
PID:14740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
720⤵
PID:14760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
721⤵
PID:14776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
722⤵
PID:14792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
723⤵
PID:14808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
724⤵
PID:14820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
725⤵
PID:14836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
726⤵
PID:14852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
727⤵
PID:14868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
728⤵
PID:14884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
729⤵
PID:14900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
730⤵
PID:14916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
731⤵
PID:14936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
732⤵
PID:14952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
733⤵
PID:14968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
734⤵
PID:14988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
735⤵
PID:15008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
736⤵
PID:15028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
737⤵
PID:15044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
738⤵
PID:15056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
739⤵
PID:15072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
740⤵
PID:15088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
741⤵
PID:15104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
742⤵
PID:15120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
743⤵
PID:15132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
744⤵
PID:15148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
745⤵
PID:15160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
746⤵
PID:15176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
747⤵
PID:15192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
748⤵
PID:15208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
749⤵
PID:15220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
750⤵
PID:15240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
751⤵
PID:15256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
752⤵
PID:15272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
753⤵
PID:15288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
754⤵
PID:15304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
755⤵
PID:15320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
756⤵
PID:15336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
757⤵
PID:13892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
758⤵
PID:15376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
759⤵
PID:15408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
760⤵
PID:15420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
761⤵
PID:15436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
762⤵
PID:15452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
763⤵
PID:15468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
764⤵
PID:15488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
765⤵
PID:15508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
766⤵
PID:15524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
767⤵
PID:15540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
768⤵
PID:15556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
769⤵
PID:15576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
770⤵
PID:15596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
771⤵
PID:15616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
772⤵
PID:15632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
773⤵
PID:15648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
774⤵
PID:15664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
775⤵
PID:15676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
776⤵
PID:15692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
777⤵
PID:15708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
778⤵
PID:15724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
779⤵
PID:15740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
780⤵
PID:15756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
781⤵
PID:15772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
782⤵
PID:15788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
783⤵
PID:15804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
784⤵
PID:15824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
785⤵
PID:15840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
786⤵
PID:15852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
787⤵
PID:15872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
788⤵
PID:15888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
789⤵
PID:15904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
790⤵
PID:15920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
791⤵
PID:15932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
792⤵
PID:15948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
793⤵
PID:15964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
794⤵
PID:15980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
795⤵
PID:15996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
796⤵
PID:16012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
797⤵
PID:16024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
798⤵
PID:16044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
799⤵
PID:16056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
800⤵
PID:16072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
801⤵
PID:16088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
802⤵
PID:16104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
803⤵
PID:16116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
804⤵
PID:16132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
805⤵
PID:16148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
806⤵
PID:16164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
807⤵
PID:16180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
808⤵
PID:16196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
809⤵
PID:16212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
810⤵
PID:16228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
811⤵
PID:16244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
812⤵
PID:16260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
813⤵
PID:16272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
814⤵
PID:16284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
815⤵
PID:16300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
816⤵
PID:16312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
817⤵
PID:16328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
818⤵
PID:16340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
819⤵
PID:16356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
820⤵
PID:16372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
821⤵
PID:3848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
822⤵
PID:3168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
823⤵
PID:10432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
824⤵
PID:10880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
825⤵
PID:10396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
826⤵
PID:10428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
827⤵
PID:15608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
828⤵
PID:16388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
829⤵
PID:16404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
830⤵
PID:16420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
831⤵
PID:16432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
832⤵
PID:16444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
833⤵
PID:16460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
834⤵
PID:16476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
835⤵
PID:16492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
836⤵
PID:16504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
837⤵
PID:16516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
838⤵
PID:16536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
839⤵
PID:16552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
840⤵
PID:16568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
841⤵
PID:16580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
842⤵
PID:16600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
843⤵
PID:16616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
844⤵
PID:16632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
845⤵
PID:16648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
846⤵
PID:16664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
847⤵
PID:16684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
848⤵
PID:16700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
849⤵
PID:16716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
850⤵
PID:16732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
851⤵
PID:16748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
852⤵
PID:16764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
853⤵
PID:16780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
854⤵
PID:16796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
855⤵
PID:16812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
856⤵
PID:16828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
857⤵
PID:16844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
858⤵
PID:16860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
859⤵
PID:16876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
860⤵
PID:16892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
861⤵
PID:16904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
862⤵
PID:16920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
863⤵
PID:16936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
864⤵
PID:16952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
865⤵
PID:16968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
866⤵
PID:16984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
867⤵
PID:17000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
868⤵
PID:17012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
869⤵
PID:17024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
870⤵
PID:17044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
871⤵
PID:17060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
872⤵
PID:17076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
873⤵
PID:17092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
874⤵
PID:17108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
875⤵
PID:17124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
876⤵
PID:17140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
877⤵
PID:17156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
878⤵
PID:17172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
879⤵
PID:17188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
880⤵
PID:17204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
881⤵
PID:17220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
882⤵
PID:17236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
883⤵
PID:17252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
884⤵
PID:17268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1920-57-0x00000000026B0000-0x0000000002D0E000-memory.dll,#1
885⤵
PID:17284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/220-180-0x0000000000000000-mapping.dmp

Download
memory/448-181-0x0000000000000000-mapping.dmp

Download
memory/828-174-0x0000000000000000-mapping.dmp

Download
memory/1196-141-0x0000000000000000-mapping.dmp

Download
memory/1288-162-0x0000000000000000-mapping.dmp

Download
memory/1324-165-0x0000000000000000-mapping.dmp

Download
memory/1348-164-0x0000000000000000-mapping.dmp

Download
memory/1372-131-0x0000000000000000-mapping.dmp

Download
memory/1528-169-0x0000000000000000-mapping.dmp

Download
memory/1552-166-0x0000000000000000-mapping.dmp

Download
memory/1576-146-0x0000000000000000-mapping.dmp

Download
memory/1708-145-0x0000000000000000-mapping.dmp

Download
memory/1720-183-0x0000000000000000-mapping.dmp

Download
memory/1868-130-0x0000000000000000-mapping.dmp

Download
memory/2152-132-0x0000000000000000-mapping.dmp

Download
memory/2176-156-0x0000000000000000-mapping.dmp

Download
memory/2260-157-0x0000000000000000-mapping.dmp

Download
memory/2292-167-0x0000000000000000-mapping.dmp

Download
memory/2352-133-0x0000000000000000-mapping.dmp

Download
memory/2408-152-0x0000000000000000-mapping.dmp

Download
memory/2524-134-0x0000000000000000-mapping.dmp

Download
memory/2680-147-0x0000000000000000-mapping.dmp

Download
memory/2784-135-0x0000000000000000-mapping.dmp

Download
memory/2792-136-0x0000000000000000-mapping.dmp

Download
memory/2904-170-0x0000000000000000-mapping.dmp

Download
memory/3164-187-0x0000000000000000-mapping.dmp

Download
memory/3180-160-0x0000000000000000-mapping.dmp

Download
memory/3288-185-0x0000000000000000-mapping.dmp

Download
memory/3384-154-0x0000000000000000-mapping.dmp

Download
memory/3388-138-0x0000000000000000-mapping.dmp

Download
memory/3428-186-0x0000000000000000-mapping.dmp

Download
memory/3468-189-0x0000000000000000-mapping.dmp

Download
memory/3668-191-0x0000000000000000-mapping.dmp

Download
memory/3680-188-0x0000000000000000-mapping.dmp

Download
memory/3756-177-0x0000000000000000-mapping.dmp

Download
memory/3940-168-0x0000000000000000-mapping.dmp

Download
memory/4012-192-0x0000000000000000-mapping.dmp

Download
memory/4056-179-0x0000000000000000-mapping.dmp

Download
memory/4064-155-0x0000000000000000-mapping.dmp

Download
memory/4084-161-0x0000000000000000-mapping.dmp

Download
memory/4124-142-0x0000000000000000-mapping.dmp

Download
memory/4128-148-0x0000000000000000-mapping.dmp

Download
memory/4172-190-0x0000000000000000-mapping.dmp

Download
memory/4180-182-0x0000000000000000-mapping.dmp

Download
memory/4212-171-0x0000000000000000-mapping.dmp

Download
memory/4216-144-0x0000000000000000-mapping.dmp

Download
memory/4224-159-0x0000000000000000-mapping.dmp

Download
memory/4272-143-0x0000000000000000-mapping.dmp

Download
memory/4284-149-0x0000000000000000-mapping.dmp

Download
memory/4324-163-0x0000000000000000-mapping.dmp

Download
memory/4344-140-0x0000000000000000-mapping.dmp

Download
memory/4396-137-0x0000000000000000-mapping.dmp

Download
memory/4488-151-0x0000000000000000-mapping.dmp

Download
memory/4596-150-0x0000000000000000-mapping.dmp

Download
memory/4696-193-0x0000000000000000-mapping.dmp

Download
memory/4780-153-0x0000000000000000-mapping.dmp

Download
memory/4836-176-0x0000000000000000-mapping.dmp

Download
memory/4840-175-0x0000000000000000-mapping.dmp

Download
memory/4912-172-0x0000000000000000-mapping.dmp

Download
memory/4948-173-0x0000000000000000-mapping.dmp

Download
memory/4988-184-0x0000000000000000-mapping.dmp

Download
memory/4996-139-0x0000000000000000-mapping.dmp

Download
memory/5048-178-0x0000000000000000-mapping.dmp

Download
memory/5060-158-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing