267e79017f594a69f6b7b83198bdccd6cde68851057d7e9dfd6a1a84406e1a98

General

Target

2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll
Size

136KB
MD5

ac0c8e0da2f97e895009c07f859a269e
SHA1

c613788affcbb8f70517ea1336bf18e51fa7e811
SHA256

267e79017f594a69f6b7b83198bdccd6cde68851057d7e9dfd6a1a84406e1a98
SHA512

e94824b7b57dd42e4f37cd0550b7cd4c6a7b3f6d73040a1bb1ec5add5e078836e2e9a5565c38662ec52afdfcd6ad05d900676f5dc5ab3a1c1dbc1d4aca3eff99
SSDEEP

3072:7873wynovR3O2MpAGJJ9V+nFTBfZteNtA:7mgxR3OdiGJHV+nFTBxEN

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

rundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exe

description	pid	process	target process
PID 1284 wrote to memory of 2788	1284	rundll32.exe	rundll32.exe
PID 1284 wrote to memory of 2788	1284	rundll32.exe	rundll32.exe
PID 1284 wrote to memory of 2788	1284	rundll32.exe	rundll32.exe
PID 2788 wrote to memory of 3136	2788	rundll32.exe	rundll32.exe
PID 2788 wrote to memory of 3136	2788	rundll32.exe	rundll32.exe
PID 2788 wrote to memory of 3136	2788	rundll32.exe	rundll32.exe
PID 3136 wrote to memory of 4360	3136	rundll32.exe	rundll32.exe
PID 3136 wrote to memory of 4360	3136	rundll32.exe	rundll32.exe
PID 3136 wrote to memory of 4360	3136	rundll32.exe	rundll32.exe
PID 4360 wrote to memory of 984	4360	rundll32.exe	rundll32.exe
PID 4360 wrote to memory of 984	4360	rundll32.exe	rundll32.exe
PID 4360 wrote to memory of 984	4360	rundll32.exe	rundll32.exe
PID 984 wrote to memory of 2080	984	rundll32.exe	rundll32.exe
PID 984 wrote to memory of 2080	984	rundll32.exe	rundll32.exe
PID 984 wrote to memory of 2080	984	rundll32.exe	rundll32.exe
PID 2080 wrote to memory of 2840	2080	rundll32.exe	rundll32.exe
PID 2080 wrote to memory of 2840	2080	rundll32.exe	rundll32.exe
PID 2080 wrote to memory of 2840	2080	rundll32.exe	rundll32.exe
PID 2840 wrote to memory of 3436	2840	rundll32.exe	rundll32.exe
PID 2840 wrote to memory of 3436	2840	rundll32.exe	rundll32.exe
PID 2840 wrote to memory of 3436	2840	rundll32.exe	rundll32.exe
PID 3436 wrote to memory of 1476	3436	rundll32.exe	rundll32.exe
PID 3436 wrote to memory of 1476	3436	rundll32.exe	rundll32.exe
PID 3436 wrote to memory of 1476	3436	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 2408	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 2408	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 2408	1476	rundll32.exe	rundll32.exe
PID 2408 wrote to memory of 4220	2408	rundll32.exe	rundll32.exe
PID 2408 wrote to memory of 4220	2408	rundll32.exe	rundll32.exe
PID 2408 wrote to memory of 4220	2408	rundll32.exe	rundll32.exe
PID 4220 wrote to memory of 1408	4220	rundll32.exe	rundll32.exe
PID 4220 wrote to memory of 1408	4220	rundll32.exe	rundll32.exe
PID 4220 wrote to memory of 1408	4220	rundll32.exe	rundll32.exe
PID 1408 wrote to memory of 308	1408	rundll32.exe	rundll32.exe
PID 1408 wrote to memory of 308	1408	rundll32.exe	rundll32.exe
PID 1408 wrote to memory of 308	1408	rundll32.exe	rundll32.exe
PID 308 wrote to memory of 340	308	rundll32.exe	rundll32.exe
PID 308 wrote to memory of 340	308	rundll32.exe	rundll32.exe
PID 308 wrote to memory of 340	308	rundll32.exe	rundll32.exe
PID 340 wrote to memory of 3692	340	rundll32.exe	rundll32.exe
PID 340 wrote to memory of 3692	340	rundll32.exe	rundll32.exe
PID 340 wrote to memory of 3692	340	rundll32.exe	rundll32.exe
PID 3692 wrote to memory of 3148	3692	rundll32.exe	rundll32.exe
PID 3692 wrote to memory of 3148	3692	rundll32.exe	rundll32.exe
PID 3692 wrote to memory of 3148	3692	rundll32.exe	rundll32.exe
PID 3148 wrote to memory of 3304	3148	rundll32.exe	rundll32.exe
PID 3148 wrote to memory of 3304	3148	rundll32.exe	rundll32.exe
PID 3148 wrote to memory of 3304	3148	rundll32.exe	rundll32.exe
PID 3304 wrote to memory of 3080	3304	rundll32.exe	rundll32.exe
PID 3304 wrote to memory of 3080	3304	rundll32.exe	rundll32.exe
PID 3304 wrote to memory of 3080	3304	rundll32.exe	rundll32.exe
PID 3080 wrote to memory of 4852	3080	rundll32.exe	rundll32.exe
PID 3080 wrote to memory of 4852	3080	rundll32.exe	rundll32.exe
PID 3080 wrote to memory of 4852	3080	rundll32.exe	rundll32.exe
PID 4852 wrote to memory of 1188	4852	rundll32.exe	rundll32.exe
PID 4852 wrote to memory of 1188	4852	rundll32.exe	rundll32.exe
PID 4852 wrote to memory of 1188	4852	rundll32.exe	rundll32.exe
PID 1188 wrote to memory of 4228	1188	rundll32.exe	rundll32.exe
PID 1188 wrote to memory of 4228	1188	rundll32.exe	rundll32.exe
PID 1188 wrote to memory of 4228	1188	rundll32.exe	rundll32.exe
PID 4228 wrote to memory of 3732	4228	rundll32.exe	rundll32.exe
PID 4228 wrote to memory of 3732	4228	rundll32.exe	rundll32.exe
PID 4228 wrote to memory of 3732	4228	rundll32.exe	rundll32.exe
PID 3732 wrote to memory of 5052	3732	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
2⤵
- Suspicious use of WriteProcessMemory
PID:2788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
3⤵
- Suspicious use of WriteProcessMemory
PID:3136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
4⤵
- Suspicious use of WriteProcessMemory
PID:4360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
5⤵
- Suspicious use of WriteProcessMemory
PID:984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
6⤵
- Suspicious use of WriteProcessMemory
PID:2080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
7⤵
- Suspicious use of WriteProcessMemory
PID:2840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
2⤵
- Suspicious use of WriteProcessMemory
PID:1476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
3⤵
- Suspicious use of WriteProcessMemory
PID:2408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
4⤵
- Suspicious use of WriteProcessMemory
PID:4220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
5⤵
- Suspicious use of WriteProcessMemory
PID:1408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
6⤵
- Suspicious use of WriteProcessMemory
PID:308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
7⤵
- Suspicious use of WriteProcessMemory
PID:340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
8⤵
- Suspicious use of WriteProcessMemory
PID:3692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
9⤵
- Suspicious use of WriteProcessMemory
PID:3148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
10⤵
- Suspicious use of WriteProcessMemory
PID:3304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
11⤵
- Suspicious use of WriteProcessMemory
PID:3080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
12⤵
- Suspicious use of WriteProcessMemory
PID:4852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
13⤵
- Suspicious use of WriteProcessMemory
PID:1188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
14⤵
- Suspicious use of WriteProcessMemory
PID:4228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
15⤵
- Suspicious use of WriteProcessMemory
PID:3732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
1⤵
PID:5052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
2⤵
PID:908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
3⤵
PID:3992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
4⤵
PID:4568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
5⤵
PID:2720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
6⤵
PID:1288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
7⤵
PID:4448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
8⤵
PID:3540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
9⤵
PID:1904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
10⤵
PID:3712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
11⤵
PID:4108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
12⤵
PID:4528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
13⤵
PID:2744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
14⤵
PID:4400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
15⤵
PID:4748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
16⤵
PID:5000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
17⤵
PID:3020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
18⤵
PID:1140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
19⤵
PID:4940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
20⤵
PID:3848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
21⤵
PID:724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
22⤵
PID:1104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
23⤵
PID:4192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
24⤵
PID:5004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
25⤵
PID:3336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
26⤵
PID:2868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
27⤵
PID:3056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
28⤵
PID:892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
29⤵
PID:1316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
30⤵
PID:4904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
31⤵
PID:4808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
32⤵
PID:964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
33⤵
PID:3612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
34⤵
PID:2980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
35⤵
PID:3268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
36⤵
PID:1488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
37⤵
PID:4780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
38⤵
PID:2232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
39⤵
PID:2332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
40⤵
PID:4084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
41⤵
PID:4092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
42⤵
PID:4248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
43⤵
PID:4792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
44⤵
PID:3628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
45⤵
PID:2536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
46⤵
PID:2736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
47⤵
PID:868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
48⤵
PID:4224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
49⤵
PID:4988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
50⤵
PID:4152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
51⤵
PID:4064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
52⤵
PID:3908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
53⤵
PID:3988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
54⤵
PID:2760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
55⤵
PID:2168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
56⤵
PID:4984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
57⤵
PID:1404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
58⤵
PID:1100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
59⤵
PID:220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
60⤵
PID:4204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
61⤵
PID:4532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
62⤵
PID:1812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
63⤵
PID:3952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
64⤵
PID:3872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
65⤵
PID:3796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
66⤵
PID:4924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
67⤵
PID:4072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
68⤵
PID:4484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
69⤵
PID:2116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
70⤵
PID:3288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
71⤵
PID:4552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
72⤵
PID:2672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
73⤵
PID:4284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
74⤵
PID:3112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
75⤵
PID:5152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
76⤵
PID:5172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
77⤵
PID:5188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
78⤵
PID:5212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
79⤵
PID:5248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
80⤵
PID:5268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
81⤵
PID:5284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
82⤵
PID:5304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
83⤵
PID:5340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
84⤵
PID:5364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
85⤵
PID:5384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
86⤵
PID:5404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
87⤵
PID:5424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
88⤵
PID:5436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
89⤵
PID:5460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
90⤵
PID:5480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
91⤵
PID:5496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
92⤵
PID:5520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
93⤵
PID:5540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
94⤵
PID:5564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
95⤵
PID:5580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
96⤵
PID:5592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
97⤵
PID:5608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
98⤵
PID:5620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
99⤵
PID:5640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
100⤵
PID:5652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
101⤵
PID:5668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
102⤵
PID:5680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
103⤵
PID:5696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
104⤵
PID:5708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
105⤵
PID:5724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
106⤵
PID:5740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
107⤵
PID:5752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
108⤵
PID:5764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
109⤵
PID:5780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
110⤵
PID:5796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
111⤵
PID:5808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
112⤵
PID:5824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
113⤵
PID:5840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
114⤵
PID:5856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
115⤵
PID:5872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
116⤵
PID:5884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
117⤵
PID:5896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
118⤵
PID:5912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
119⤵
PID:5924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
120⤵
PID:5940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
121⤵
PID:5952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
122⤵
PID:5964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
123⤵
PID:5976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
124⤵
PID:5996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
125⤵
PID:6008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
126⤵
PID:6024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
127⤵
PID:6040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
128⤵
PID:6056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
129⤵
PID:6068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
130⤵
PID:6084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
131⤵
PID:6100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
132⤵
PID:6112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
133⤵
PID:6128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
134⤵
PID:6148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
135⤵
PID:6164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
136⤵
PID:6180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
137⤵
PID:6196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
138⤵
PID:6212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
139⤵
PID:6228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
140⤵
PID:6244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
141⤵
PID:6256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
142⤵
PID:6268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
143⤵
PID:6280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
144⤵
PID:6296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
145⤵
PID:6312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
146⤵
PID:6324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
147⤵
PID:6344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
148⤵
PID:6360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
149⤵
PID:6372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
150⤵
PID:6384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
151⤵
PID:6396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
152⤵
PID:6412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
153⤵
PID:6428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
154⤵
PID:6444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
155⤵
PID:6464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
156⤵
PID:6480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
157⤵
PID:6492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
158⤵
PID:6508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
159⤵
PID:6520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
160⤵
PID:6532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
161⤵
PID:6548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
162⤵
PID:6560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
163⤵
PID:6580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
164⤵
PID:6592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
165⤵
PID:6608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
166⤵
PID:6620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
167⤵
PID:6632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
168⤵
PID:6652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
169⤵
PID:6664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
170⤵
PID:6684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
171⤵
PID:6696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
172⤵
PID:6712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
173⤵
PID:6728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
174⤵
PID:6740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
175⤵
PID:6756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
176⤵
PID:6768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
177⤵
PID:6784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
178⤵
PID:6800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
179⤵
PID:6812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
180⤵
PID:6832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
181⤵
PID:6844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
182⤵
PID:6884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
183⤵
PID:6896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
184⤵
PID:6932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
185⤵
PID:6944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
186⤵
PID:6956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
187⤵
PID:6976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
188⤵
PID:6992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
189⤵
PID:7004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
190⤵
PID:7020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
191⤵
PID:7032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
192⤵
PID:7052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
193⤵
PID:7068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
194⤵
PID:7084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
195⤵
PID:7100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
196⤵
PID:7116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
197⤵
PID:7128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
198⤵
PID:7140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
199⤵
PID:7152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
200⤵
PID:2024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
201⤵
PID:4868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
202⤵
PID:1652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
203⤵
PID:1920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
204⤵
PID:4180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
205⤵
PID:2204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
206⤵
PID:4752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
207⤵
PID:7172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
208⤵
PID:7184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
209⤵
PID:7200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
210⤵
PID:7216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
211⤵
PID:7228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
212⤵
PID:7244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
213⤵
PID:7256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
214⤵
PID:7272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
215⤵
PID:7288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
216⤵
PID:7304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
217⤵
PID:7316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
218⤵
PID:7332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
219⤵
PID:7352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
220⤵
PID:7364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
221⤵
PID:7384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
222⤵
PID:7396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
223⤵
PID:7412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
224⤵
PID:7424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
225⤵
PID:7440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
226⤵
PID:7452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
227⤵
PID:7464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
228⤵
PID:7484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
229⤵
PID:7500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
230⤵
PID:7512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
231⤵
PID:7528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
232⤵
PID:7544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
233⤵
PID:7560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
234⤵
PID:7572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
235⤵
PID:7588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
236⤵
PID:7604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
237⤵
PID:7620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
238⤵
PID:7636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
239⤵
PID:7648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
240⤵
PID:7664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
241⤵
PID:7680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
242⤵
PID:7696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
243⤵
PID:7712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
244⤵
PID:7728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
245⤵
PID:7744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
246⤵
PID:7760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
247⤵
PID:7772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
248⤵
PID:7784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
249⤵
PID:7800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
250⤵
PID:7816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
251⤵
PID:7836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
252⤵
PID:7852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
253⤵
PID:7868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
254⤵
PID:7884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
255⤵
PID:7900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
256⤵
PID:7912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
257⤵
PID:7928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
258⤵
PID:7944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
259⤵
PID:7960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
260⤵
PID:7976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
261⤵
PID:7992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
262⤵
PID:8008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
263⤵
PID:8024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
264⤵
PID:8040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
265⤵
PID:8056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
266⤵
PID:8068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
267⤵
PID:8084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
268⤵
PID:8100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
269⤵
PID:8112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
270⤵
PID:8128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
271⤵
PID:8152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
272⤵
PID:8176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
273⤵
PID:8208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
274⤵
PID:8244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
275⤵
PID:8256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
276⤵
PID:8272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
277⤵
PID:8284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
278⤵
PID:8300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
279⤵
PID:8320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
280⤵
PID:8336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
281⤵
PID:8352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
282⤵
PID:8368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
283⤵
PID:8384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
284⤵
PID:8396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
285⤵
PID:8416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
286⤵
PID:8428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
287⤵
PID:8444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
288⤵
PID:8460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
289⤵
PID:8476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
290⤵
PID:8492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
291⤵
PID:8508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
292⤵
PID:8524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
293⤵
PID:8536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
294⤵
PID:8552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
295⤵
PID:8568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
296⤵
PID:8584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
297⤵
PID:8596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
298⤵
PID:8608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
299⤵
PID:8628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
300⤵
PID:8644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
301⤵
PID:8660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
302⤵
PID:8676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
303⤵
PID:8688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
304⤵
PID:8708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
305⤵
PID:8724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
306⤵
PID:8736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
307⤵
PID:8752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
308⤵
PID:8772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
309⤵
PID:8788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
310⤵
PID:8804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
311⤵
PID:8820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
312⤵
PID:8836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
313⤵
PID:8848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
314⤵
PID:8868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
315⤵
PID:8884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
316⤵
PID:8900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
317⤵
PID:8916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
318⤵
PID:8928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
319⤵
PID:8940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
320⤵
PID:8956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
321⤵
PID:8972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
322⤵
PID:8988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
323⤵
PID:9000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
324⤵
PID:9012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
325⤵
PID:9028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
326⤵
PID:9048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
327⤵
PID:9064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
328⤵
PID:9080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
329⤵
PID:9092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
330⤵
PID:9108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
331⤵
PID:9124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
332⤵
PID:9140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
333⤵
PID:9156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
334⤵
PID:9172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
335⤵
PID:9188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
336⤵
PID:9204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
337⤵
PID:8168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
338⤵
PID:9236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
339⤵
PID:9252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
340⤵
PID:9268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
341⤵
PID:9284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
342⤵
PID:9300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
343⤵
PID:9316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
344⤵
PID:9328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
345⤵
PID:9340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
346⤵
PID:9352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
347⤵
PID:9372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
348⤵
PID:9384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
349⤵
PID:9404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
350⤵
PID:9420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
351⤵
PID:9432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
352⤵
PID:9452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
353⤵
PID:9468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
354⤵
PID:9484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
355⤵
PID:9500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
356⤵
PID:9516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
357⤵
PID:9528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
358⤵
PID:9544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
359⤵
PID:9556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
360⤵
PID:9568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
361⤵
PID:9584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
362⤵
PID:9600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
363⤵
PID:9616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
364⤵
PID:9640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
365⤵
PID:9656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
366⤵
PID:9688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
367⤵
PID:9704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
368⤵
PID:9728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
369⤵
PID:9768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
370⤵
PID:9780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
371⤵
PID:9804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
372⤵
PID:9832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
373⤵
PID:9852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
374⤵
PID:9864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
375⤵
PID:9880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
376⤵
PID:9896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
377⤵
PID:9912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
378⤵
PID:9940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
379⤵
PID:9956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
380⤵
PID:9968

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
381⤵
PID:9984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
382⤵
PID:10000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
383⤵
PID:10024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
384⤵
PID:10036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
385⤵
PID:10056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
386⤵
PID:10068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
387⤵
PID:10092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
388⤵
PID:10108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
389⤵
PID:10128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
390⤵
PID:10148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
391⤵
PID:10164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
392⤵
PID:10180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
393⤵
PID:10192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
394⤵
PID:10204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
395⤵
PID:10224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
396⤵
PID:5128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
397⤵
PID:9624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
398⤵
PID:3464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
399⤵
PID:3996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
400⤵
PID:3840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
401⤵
PID:10244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
402⤵
PID:10256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
403⤵
PID:10276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
404⤵
PID:10288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
405⤵
PID:10308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
406⤵
PID:10320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
407⤵
PID:10336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
408⤵
PID:10352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
409⤵
PID:10368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
410⤵
PID:10384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
411⤵
PID:10396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
412⤵
PID:10412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
413⤵
PID:10428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
414⤵
PID:10444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
415⤵
PID:10460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
416⤵
PID:10476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
417⤵
PID:10492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
418⤵
PID:10504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
419⤵
PID:10524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
420⤵
PID:10536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
421⤵
PID:10552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
422⤵
PID:10568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
423⤵
PID:10588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
424⤵
PID:10604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
425⤵
PID:10620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
426⤵
PID:10636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
427⤵
PID:10652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
428⤵
PID:10668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
429⤵
PID:10684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
430⤵
PID:10696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
431⤵
PID:10712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
432⤵
PID:10724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
433⤵
PID:10752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
434⤵
PID:10768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
435⤵
PID:10784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
436⤵
PID:10804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
437⤵
PID:10820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
438⤵
PID:10832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
439⤵
PID:10844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
440⤵
PID:10864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
441⤵
PID:10880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
442⤵
PID:10896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
443⤵
PID:10912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
444⤵
PID:10924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
445⤵
PID:10944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
446⤵
PID:10956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
447⤵
PID:10976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
448⤵
PID:10992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
449⤵
PID:11008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
450⤵
PID:11024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
451⤵
PID:11036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
452⤵
PID:11056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
453⤵
PID:11072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
454⤵
PID:11088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
455⤵
PID:11100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
456⤵
PID:11116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
457⤵
PID:11132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
458⤵
PID:11148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
459⤵
PID:11164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
460⤵
PID:11180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
461⤵
PID:11196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
462⤵
PID:11212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
463⤵
PID:11232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
464⤵
PID:11248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
465⤵
PID:11260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
466⤵
PID:11276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
467⤵
PID:11292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
468⤵
PID:11312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
469⤵
PID:11336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
470⤵
PID:11352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
471⤵
PID:11364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
472⤵
PID:11384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
473⤵
PID:11396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
474⤵
PID:11412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
475⤵
PID:11424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
476⤵
PID:11444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
477⤵
PID:11460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
478⤵
PID:11476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
479⤵
PID:11492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
480⤵
PID:11508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
481⤵
PID:11520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
482⤵
PID:11540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
483⤵
PID:11556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
484⤵
PID:11568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
485⤵
PID:11588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
486⤵
PID:11604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
487⤵
PID:11620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
488⤵
PID:11636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
489⤵
PID:11652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
490⤵
PID:11664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
491⤵
PID:11684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
492⤵
PID:11696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
493⤵
PID:11712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
494⤵
PID:11732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
495⤵
PID:11748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
496⤵
PID:11760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
497⤵
PID:11780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
498⤵
PID:11796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
499⤵
PID:11808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
500⤵
PID:11824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
501⤵
PID:11836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
502⤵
PID:11856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
503⤵
PID:11872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
504⤵
PID:11884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
505⤵
PID:11900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
506⤵
PID:11916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
507⤵
PID:11932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
508⤵
PID:11944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
509⤵
PID:11964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
510⤵
PID:11976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
511⤵
PID:11992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
512⤵
PID:12008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
513⤵
PID:12024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
514⤵
PID:12040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
515⤵
PID:12056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
516⤵
PID:12068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
517⤵
PID:12088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
518⤵
PID:12104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
519⤵
PID:12120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
520⤵
PID:12136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
521⤵
PID:12152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
522⤵
PID:12168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
523⤵
PID:12184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
524⤵
PID:12200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
525⤵
PID:12216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
526⤵
PID:12232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
527⤵
PID:12244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
528⤵
PID:12264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
529⤵
PID:12276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
530⤵
PID:11320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
531⤵
PID:3244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
532⤵
PID:12292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
533⤵
PID:12308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
534⤵
PID:12324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
535⤵
PID:12336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
536⤵
PID:12356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
537⤵
PID:12372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
538⤵
PID:12388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
539⤵
PID:12404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
540⤵
PID:12416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
541⤵
PID:12428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
542⤵
PID:12440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
543⤵
PID:12456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
544⤵
PID:12468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
545⤵
PID:12484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
546⤵
PID:12500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
547⤵
PID:12516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
548⤵
PID:12528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
549⤵
PID:12544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
550⤵
PID:12560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
551⤵
PID:12576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
552⤵
PID:12592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
553⤵
PID:12608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
554⤵
PID:12624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
555⤵
PID:12640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
556⤵
PID:12656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
557⤵
PID:12672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
558⤵
PID:12684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
559⤵
PID:12700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
560⤵
PID:12716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
561⤵
PID:12732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
562⤵
PID:12748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
563⤵
PID:12760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
564⤵
PID:12780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
565⤵
PID:12792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
566⤵
PID:12808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
567⤵
PID:12824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
568⤵
PID:12836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
569⤵
PID:12852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
570⤵
PID:12868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
571⤵
PID:12884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
572⤵
PID:12900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
573⤵
PID:12912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
574⤵
PID:12932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
575⤵
PID:12944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
576⤵
PID:12964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
577⤵
PID:12976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
578⤵
PID:12996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
579⤵
PID:13012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
580⤵
PID:13028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
581⤵
PID:13044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
582⤵
PID:13060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
583⤵
PID:13072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
584⤵
PID:13088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
585⤵
PID:13104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
586⤵
PID:13124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
587⤵
PID:13140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
588⤵
PID:13156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
589⤵
PID:13172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
590⤵
PID:13188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
591⤵
PID:13204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
592⤵
PID:13220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
593⤵
PID:13236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
594⤵
PID:13252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
595⤵
PID:13268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
596⤵
PID:13284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
597⤵
PID:13300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
598⤵
PID:13320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
599⤵
PID:13336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
600⤵
PID:13352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
601⤵
PID:13364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
602⤵
PID:13380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
603⤵
PID:13396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
604⤵
PID:13412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
605⤵
PID:13428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
606⤵
PID:13444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
607⤵
PID:13456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
608⤵
PID:13472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
609⤵
PID:13484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
610⤵
PID:13504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
611⤵
PID:13520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
612⤵
PID:13536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
613⤵
PID:13552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
614⤵
PID:13568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
615⤵
PID:13580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
616⤵
PID:13596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
617⤵
PID:13612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
618⤵
PID:13628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
619⤵
PID:13640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
620⤵
PID:13656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
621⤵
PID:13672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
622⤵
PID:13688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
623⤵
PID:13704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
624⤵
PID:13720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
625⤵
PID:13736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
626⤵
PID:13752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
627⤵
PID:13768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
628⤵
PID:13780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
629⤵
PID:13800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
630⤵
PID:13816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
631⤵
PID:13832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
632⤵
PID:13844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
633⤵
PID:13856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
634⤵
PID:13872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
635⤵
PID:13888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
636⤵
PID:13904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
637⤵
PID:13916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
638⤵
PID:13932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
639⤵
PID:13948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
640⤵
PID:13964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
641⤵
PID:13980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
642⤵
PID:13996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
643⤵
PID:14008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
644⤵
PID:14020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
645⤵
PID:14040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
646⤵
PID:14052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
647⤵
PID:14072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
648⤵
PID:14088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
649⤵
PID:14100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
650⤵
PID:14116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
651⤵
PID:14132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
652⤵
PID:14144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
653⤵
PID:14160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
654⤵
PID:14176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
655⤵
PID:14192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
656⤵
PID:14208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
657⤵
PID:14224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
658⤵
PID:14240

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
659⤵
PID:14256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
660⤵
PID:14272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
661⤵
PID:14284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
662⤵
PID:14296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
663⤵
PID:14316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
664⤵
PID:14332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
665⤵
PID:14352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
666⤵
PID:14368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
667⤵
PID:14384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
668⤵
PID:14400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
669⤵
PID:14416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
670⤵
PID:14432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
671⤵
PID:14448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
672⤵
PID:14464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
673⤵
PID:14480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
674⤵
PID:14496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
675⤵
PID:14512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
676⤵
PID:14528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
677⤵
PID:14544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
678⤵
PID:14560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
679⤵
PID:14576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
680⤵
PID:14592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
681⤵
PID:14608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
682⤵
PID:14624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
683⤵
PID:14640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
684⤵
PID:14652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
685⤵
PID:14668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
686⤵
PID:14680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
687⤵
PID:14700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
688⤵
PID:14716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
689⤵
PID:14732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
690⤵
PID:14744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
691⤵
PID:14760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
692⤵
PID:14776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
693⤵
PID:14788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
694⤵
PID:14804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
695⤵
PID:14824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
696⤵
PID:14840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
697⤵
PID:14856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
698⤵
PID:14868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
699⤵
PID:14884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
700⤵
PID:14900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
701⤵
PID:14916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
702⤵
PID:14932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
703⤵
PID:14944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
704⤵
PID:14964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
705⤵
PID:14980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
706⤵
PID:14996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
707⤵
PID:15012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
708⤵
PID:15028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
709⤵
PID:15044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
710⤵
PID:15060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
711⤵
PID:15076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
712⤵
PID:15088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
713⤵
PID:15104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
714⤵
PID:15120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
715⤵
PID:15132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
716⤵
PID:15144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
717⤵
PID:15156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
718⤵
PID:15180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
719⤵
PID:15196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
720⤵
PID:15212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
721⤵
PID:15228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
722⤵
PID:15244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
723⤵
PID:15260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
724⤵
PID:15280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
725⤵
PID:15292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
726⤵
PID:15312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
727⤵
PID:15324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
728⤵
PID:15340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
729⤵
PID:15356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
730⤵
PID:5016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
731⤵
PID:15364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
732⤵
PID:15384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
733⤵
PID:15396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
734⤵
PID:15412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
735⤵
PID:15428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
736⤵
PID:15444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
737⤵
PID:15460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
738⤵
PID:15476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
739⤵
PID:15492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
740⤵
PID:15504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
741⤵
PID:15524

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
742⤵
PID:15540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
743⤵
PID:15556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
744⤵
PID:15572

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
745⤵
PID:15588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
746⤵
PID:15604

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
747⤵
PID:15616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
748⤵
PID:15632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
749⤵
PID:15648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
750⤵
PID:15664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
751⤵
PID:15680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
752⤵
PID:15696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
753⤵
PID:15712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
754⤵
PID:15728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
755⤵
PID:15744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
756⤵
PID:15756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
757⤵
PID:15776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
758⤵
PID:15788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
759⤵
PID:15804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
760⤵
PID:15820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
761⤵
PID:15836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
762⤵
PID:15852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
763⤵
PID:15864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
764⤵
PID:15880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
765⤵
PID:15896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
766⤵
PID:15912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
767⤵
PID:15932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
768⤵
PID:15948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
769⤵
PID:15964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
770⤵
PID:15980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
771⤵
PID:15992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
772⤵
PID:16004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
773⤵
PID:16016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
774⤵
PID:16036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
775⤵
PID:16052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
776⤵
PID:16064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
777⤵
PID:16080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
778⤵
PID:16092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
779⤵
PID:16108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
780⤵
PID:16124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
781⤵
PID:16136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
782⤵
PID:16152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
783⤵
PID:16168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
784⤵
PID:16180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
785⤵
PID:16200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
786⤵
PID:16216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
787⤵
PID:16232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
788⤵
PID:16248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
789⤵
PID:16264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
790⤵
PID:16280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
791⤵
PID:16296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
792⤵
PID:16312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
793⤵
PID:16328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
794⤵
PID:16344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
795⤵
PID:16360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
796⤵
PID:16372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
797⤵
PID:2384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
798⤵
PID:4972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
799⤵
PID:4060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
800⤵
PID:4656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
801⤵
PID:16392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
802⤵
PID:16408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
803⤵
PID:16424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
804⤵
PID:16436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
805⤵
PID:16456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
806⤵
PID:16472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
807⤵
PID:16484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
808⤵
PID:16500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
809⤵
PID:16512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
810⤵
PID:16528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
811⤵
PID:16540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
812⤵
PID:16552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
813⤵
PID:16568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
814⤵
PID:16584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
815⤵
PID:16600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
816⤵
PID:16616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
817⤵
PID:16628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
818⤵
PID:16652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
819⤵
PID:16684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
820⤵
PID:16700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
821⤵
PID:16716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
822⤵
PID:16728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
823⤵
PID:16752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
824⤵
PID:16780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
825⤵
PID:16804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
826⤵
PID:16816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
827⤵
PID:16836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
828⤵
PID:16856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
829⤵
PID:16872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
830⤵
PID:16888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
831⤵
PID:16904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
832⤵
PID:16920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
833⤵
PID:16932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
834⤵
PID:16948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
835⤵
PID:16964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
836⤵
PID:16980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
837⤵
PID:16996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
838⤵
PID:17012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
839⤵
PID:17024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
840⤵
PID:17044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
841⤵
PID:17056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
842⤵
PID:17072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
843⤵
PID:17092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
844⤵
PID:17104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
845⤵
PID:17124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
846⤵
PID:17140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
847⤵
PID:17152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
848⤵
PID:17168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
849⤵
PID:17184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
850⤵
PID:17200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
851⤵
PID:17216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
852⤵
PID:17232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
853⤵
PID:17244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
854⤵
PID:17260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
855⤵
PID:17280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
856⤵
PID:17296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2056-139-0x0000000000AD0000-0x0000000000AF2000-memory.dll,#1
857⤵
PID:17312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/308-146-0x0000000000000000-mapping.dmp

Download
memory/340-147-0x0000000000000000-mapping.dmp

Download
memory/724-176-0x0000000000000000-mapping.dmp

Download
memory/892-183-0x0000000000000000-mapping.dmp

Download
memory/908-157-0x0000000000000000-mapping.dmp

Download
memory/964-187-0x0000000000000000-mapping.dmp

Download
memory/984-138-0x0000000000000000-mapping.dmp

Download
memory/1104-177-0x0000000000000000-mapping.dmp

Download
memory/1140-173-0x0000000000000000-mapping.dmp

Download
memory/1188-153-0x0000000000000000-mapping.dmp

Download
memory/1288-161-0x0000000000000000-mapping.dmp

Download
memory/1316-184-0x0000000000000000-mapping.dmp

Download
memory/1408-145-0x0000000000000000-mapping.dmp

Download
memory/1476-142-0x0000000000000000-mapping.dmp

Download
memory/1488-191-0x0000000000000000-mapping.dmp

Download
memory/1904-164-0x0000000000000000-mapping.dmp

Download
memory/2080-139-0x0000000000000000-mapping.dmp

Download
memory/2232-193-0x0000000000000000-mapping.dmp

Download
memory/2332-194-0x0000000000000000-mapping.dmp

Download
memory/2408-143-0x0000000000000000-mapping.dmp

Download
memory/2720-160-0x0000000000000000-mapping.dmp

Download
memory/2744-168-0x0000000000000000-mapping.dmp

Download
memory/2788-135-0x0000000000000000-mapping.dmp

Download
memory/2840-140-0x0000000000000000-mapping.dmp

Download
memory/2868-181-0x0000000000000000-mapping.dmp

Download
memory/2980-189-0x0000000000000000-mapping.dmp

Download
memory/3020-172-0x0000000000000000-mapping.dmp

Download
memory/3056-182-0x0000000000000000-mapping.dmp

Download
memory/3080-151-0x0000000000000000-mapping.dmp

Download
memory/3136-136-0x0000000000000000-mapping.dmp

Download
memory/3148-149-0x0000000000000000-mapping.dmp

Download
memory/3268-190-0x0000000000000000-mapping.dmp

Download
memory/3304-150-0x0000000000000000-mapping.dmp

Download
memory/3336-180-0x0000000000000000-mapping.dmp

Download
memory/3436-141-0x0000000000000000-mapping.dmp

Download
memory/3540-163-0x0000000000000000-mapping.dmp

Download
memory/3612-188-0x0000000000000000-mapping.dmp

Download
memory/3692-148-0x0000000000000000-mapping.dmp

Download
memory/3712-165-0x0000000000000000-mapping.dmp

Download
memory/3732-155-0x0000000000000000-mapping.dmp

Download
memory/3848-175-0x0000000000000000-mapping.dmp

Download
memory/3992-158-0x0000000000000000-mapping.dmp

Download
memory/4084-195-0x0000000000000000-mapping.dmp

Download
memory/4092-196-0x0000000000000000-mapping.dmp

Download
memory/4108-166-0x0000000000000000-mapping.dmp

Download
memory/4192-178-0x0000000000000000-mapping.dmp

Download
memory/4220-144-0x0000000000000000-mapping.dmp

Download
memory/4228-154-0x0000000000000000-mapping.dmp

Download
memory/4248-197-0x0000000000000000-mapping.dmp

Download
memory/4360-137-0x0000000000000000-mapping.dmp

Download
memory/4400-169-0x0000000000000000-mapping.dmp

Download
memory/4448-162-0x0000000000000000-mapping.dmp

Download
memory/4528-167-0x0000000000000000-mapping.dmp

Download
memory/4568-159-0x0000000000000000-mapping.dmp

Download
memory/4748-170-0x0000000000000000-mapping.dmp

Download
memory/4780-192-0x0000000000000000-mapping.dmp

Download
memory/4792-198-0x0000000000000000-mapping.dmp

Download
memory/4808-186-0x0000000000000000-mapping.dmp

Download
memory/4852-152-0x0000000000000000-mapping.dmp

Download
memory/4904-185-0x0000000000000000-mapping.dmp

Download
memory/4940-174-0x0000000000000000-mapping.dmp

Download
memory/5000-171-0x0000000000000000-mapping.dmp

Download
memory/5004-179-0x0000000000000000-mapping.dmp

Download
memory/5052-156-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing