7b08b5f42954093d6a2342171eb6dc8da6a9d7d3f1d546b4f7c7a3f5345d4aa6

General

Target

1960-57-0x0000000000140000-0x0000000000162000-memory.dll
Size

136KB
MD5

e3a9620044e86095d38cb2eafb8cfdfb
SHA1

8d0f9d10fb7b863d0e999b4f8cc7d0469c835f20
SHA256

7b08b5f42954093d6a2342171eb6dc8da6a9d7d3f1d546b4f7c7a3f5345d4aa6
SHA512

02be5750419b4a7f2e8e9b1c5073b2d103c3f4907a7e92471118176b4bf1488d913bf75819620d8cfd9e12d8431eac368566989e41046f9721e9a0518f6d55bf
SSDEEP

1536:0Cf1pg43ZwsCJ28qerxgmtszKiSMQhABArbMJNq0ecieIOpnToIfp9cegrzsk:0CmTqETtsxOgAkJA0LVBTBfpWepk

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

rundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exe

description	pid	process	target process
PID 4456 wrote to memory of 4368	4456	rundll32.exe	rundll32.exe
PID 4456 wrote to memory of 4368	4456	rundll32.exe	rundll32.exe
PID 4456 wrote to memory of 4368	4456	rundll32.exe	rundll32.exe
PID 4368 wrote to memory of 2844	4368	rundll32.exe	rundll32.exe
PID 4368 wrote to memory of 2844	4368	rundll32.exe	rundll32.exe
PID 4368 wrote to memory of 2844	4368	rundll32.exe	rundll32.exe
PID 2844 wrote to memory of 4192	2844	rundll32.exe	rundll32.exe
PID 2844 wrote to memory of 4192	2844	rundll32.exe	rundll32.exe
PID 2844 wrote to memory of 4192	2844	rundll32.exe	rundll32.exe
PID 4192 wrote to memory of 628	4192	rundll32.exe	rundll32.exe
PID 4192 wrote to memory of 628	4192	rundll32.exe	rundll32.exe
PID 4192 wrote to memory of 628	4192	rundll32.exe	rundll32.exe
PID 628 wrote to memory of 4248	628	rundll32.exe	rundll32.exe
PID 628 wrote to memory of 4248	628	rundll32.exe	rundll32.exe
PID 628 wrote to memory of 4248	628	rundll32.exe	rundll32.exe
PID 4248 wrote to memory of 3652	4248	rundll32.exe	rundll32.exe
PID 4248 wrote to memory of 3652	4248	rundll32.exe	rundll32.exe
PID 4248 wrote to memory of 3652	4248	rundll32.exe	rundll32.exe
PID 3652 wrote to memory of 372	3652	rundll32.exe	rundll32.exe
PID 3652 wrote to memory of 372	3652	rundll32.exe	rundll32.exe
PID 3652 wrote to memory of 372	3652	rundll32.exe	rundll32.exe
PID 372 wrote to memory of 216	372	rundll32.exe	rundll32.exe
PID 372 wrote to memory of 216	372	rundll32.exe	rundll32.exe
PID 372 wrote to memory of 216	372	rundll32.exe	rundll32.exe
PID 216 wrote to memory of 1712	216	rundll32.exe	rundll32.exe
PID 216 wrote to memory of 1712	216	rundll32.exe	rundll32.exe
PID 216 wrote to memory of 1712	216	rundll32.exe	rundll32.exe
PID 1712 wrote to memory of 3900	1712	rundll32.exe	rundll32.exe
PID 1712 wrote to memory of 3900	1712	rundll32.exe	rundll32.exe
PID 1712 wrote to memory of 3900	1712	rundll32.exe	rundll32.exe
PID 3900 wrote to memory of 1212	3900	rundll32.exe	rundll32.exe
PID 3900 wrote to memory of 1212	3900	rundll32.exe	rundll32.exe
PID 3900 wrote to memory of 1212	3900	rundll32.exe	rundll32.exe
PID 1212 wrote to memory of 3768	1212	rundll32.exe	rundll32.exe
PID 1212 wrote to memory of 3768	1212	rundll32.exe	rundll32.exe
PID 1212 wrote to memory of 3768	1212	rundll32.exe	rundll32.exe
PID 3768 wrote to memory of 1272	3768	rundll32.exe	rundll32.exe
PID 3768 wrote to memory of 1272	3768	rundll32.exe	rundll32.exe
PID 3768 wrote to memory of 1272	3768	rundll32.exe	rundll32.exe
PID 1272 wrote to memory of 1216	1272	rundll32.exe	rundll32.exe
PID 1272 wrote to memory of 1216	1272	rundll32.exe	rundll32.exe
PID 1272 wrote to memory of 1216	1272	rundll32.exe	rundll32.exe
PID 1216 wrote to memory of 3624	1216	rundll32.exe	rundll32.exe
PID 1216 wrote to memory of 3624	1216	rundll32.exe	rundll32.exe
PID 1216 wrote to memory of 3624	1216	rundll32.exe	rundll32.exe
PID 3624 wrote to memory of 1396	3624	rundll32.exe	rundll32.exe
PID 3624 wrote to memory of 1396	3624	rundll32.exe	rundll32.exe
PID 3624 wrote to memory of 1396	3624	rundll32.exe	rundll32.exe
PID 1396 wrote to memory of 1424	1396	rundll32.exe	rundll32.exe
PID 1396 wrote to memory of 1424	1396	rundll32.exe	rundll32.exe
PID 1396 wrote to memory of 1424	1396	rundll32.exe	rundll32.exe
PID 1424 wrote to memory of 4008	1424	rundll32.exe	rundll32.exe
PID 1424 wrote to memory of 4008	1424	rundll32.exe	rundll32.exe
PID 1424 wrote to memory of 4008	1424	rundll32.exe	rundll32.exe
PID 4008 wrote to memory of 3096	4008	rundll32.exe	rundll32.exe
PID 4008 wrote to memory of 3096	4008	rundll32.exe	rundll32.exe
PID 4008 wrote to memory of 3096	4008	rundll32.exe	rundll32.exe
PID 3096 wrote to memory of 4692	3096	rundll32.exe	rundll32.exe
PID 3096 wrote to memory of 4692	3096	rundll32.exe	rundll32.exe
PID 3096 wrote to memory of 4692	3096	rundll32.exe	rundll32.exe
PID 4692 wrote to memory of 3120	4692	rundll32.exe	rundll32.exe
PID 4692 wrote to memory of 3120	4692	rundll32.exe	rundll32.exe
PID 4692 wrote to memory of 3120	4692	rundll32.exe	rundll32.exe
PID 3120 wrote to memory of 3516	3120	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
2⤵
- Suspicious use of WriteProcessMemory
PID:4368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
3⤵
- Suspicious use of WriteProcessMemory
PID:2844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
4⤵
- Suspicious use of WriteProcessMemory
PID:4192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
5⤵
- Suspicious use of WriteProcessMemory
PID:628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
6⤵
- Suspicious use of WriteProcessMemory
PID:4248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
7⤵
- Suspicious use of WriteProcessMemory
PID:3652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
8⤵
- Suspicious use of WriteProcessMemory
PID:372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
9⤵
- Suspicious use of WriteProcessMemory
PID:216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
10⤵
- Suspicious use of WriteProcessMemory
PID:1712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
11⤵
- Suspicious use of WriteProcessMemory
PID:3900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
12⤵
- Suspicious use of WriteProcessMemory
PID:1212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
13⤵
- Suspicious use of WriteProcessMemory
PID:3768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
14⤵
- Suspicious use of WriteProcessMemory
PID:1272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
15⤵
- Suspicious use of WriteProcessMemory
PID:1216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
16⤵
- Suspicious use of WriteProcessMemory
PID:3624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
17⤵
- Suspicious use of WriteProcessMemory
PID:1396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
18⤵
- Suspicious use of WriteProcessMemory
PID:1424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
19⤵
- Suspicious use of WriteProcessMemory
PID:4008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
20⤵
- Suspicious use of WriteProcessMemory
PID:3096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
21⤵
- Suspicious use of WriteProcessMemory
PID:4692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
22⤵
- Suspicious use of WriteProcessMemory
PID:3120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
23⤵
PID:3516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
24⤵
PID:3812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
25⤵
PID:4900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
26⤵
PID:1664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
27⤵
PID:2364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
28⤵
PID:1644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
29⤵
PID:3236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
30⤵
PID:1104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
31⤵
PID:1612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
32⤵
PID:3520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
33⤵
PID:3348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
34⤵
PID:3488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
35⤵
PID:5080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
36⤵
PID:2400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
37⤵
PID:3788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
38⤵
PID:3580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
39⤵
PID:4428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
40⤵
PID:4220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
41⤵
PID:4116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
42⤵
PID:4564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
43⤵
PID:1888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
44⤵
PID:2712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
45⤵
PID:2992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
46⤵
PID:4280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
47⤵
PID:1552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
48⤵
PID:4560

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
49⤵
PID:3016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
50⤵
PID:2520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
51⤵
PID:3552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
52⤵
PID:2740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
53⤵
PID:2440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
54⤵
PID:3796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
55⤵
PID:2112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
56⤵
PID:384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
57⤵
PID:5096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
58⤵
PID:2632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
59⤵
PID:4120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
60⤵
PID:64

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
61⤵
PID:876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
62⤵
PID:2784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
63⤵
PID:3868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
64⤵
PID:1520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
65⤵
PID:4072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
66⤵
PID:2816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
67⤵
PID:5068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
68⤵
PID:1456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
69⤵
PID:2468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
70⤵
PID:320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
71⤵
PID:4580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
72⤵
PID:4432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
73⤵
PID:3716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
74⤵
PID:4284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
75⤵
PID:2332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
76⤵
PID:376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
77⤵
PID:3252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
78⤵
PID:4108

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
79⤵
PID:448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
80⤵
PID:1420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
81⤵
PID:1492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
82⤵
PID:1744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
83⤵
PID:1152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
84⤵
PID:4984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
85⤵
PID:4360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
86⤵
PID:1208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
87⤵
PID:4860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
88⤵
PID:3144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
89⤵
PID:4904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
90⤵
PID:3396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
91⤵
PID:3068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
92⤵
PID:3420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
93⤵
PID:4820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
94⤵
PID:5136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
95⤵
PID:5164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
96⤵
PID:5192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
97⤵
PID:5212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
98⤵
PID:5228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
99⤵
PID:5248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
100⤵
PID:5260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
101⤵
PID:5276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
102⤵
PID:5296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
103⤵
PID:5312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
104⤵
PID:5328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
105⤵
PID:5348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
106⤵
PID:5364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
107⤵
PID:5380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
108⤵
PID:5396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
109⤵
PID:5412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
110⤵
PID:5428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
111⤵
PID:5440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
112⤵
PID:5460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
113⤵
PID:5476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
114⤵
PID:5496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
115⤵
PID:5512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
116⤵
PID:5528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
117⤵
PID:5548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
118⤵
PID:5564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
119⤵
PID:5576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
120⤵
PID:5596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
121⤵
PID:5616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
122⤵
PID:5628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
123⤵
PID:5648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
124⤵
PID:5664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
125⤵
PID:5680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
126⤵
PID:5692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
127⤵
PID:5708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
128⤵
PID:5720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
129⤵
PID:5736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
130⤵
PID:5756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
131⤵
PID:5776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
132⤵
PID:5792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
133⤵
PID:5816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
134⤵
PID:5832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
135⤵
PID:5848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
136⤵
PID:5868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
137⤵
PID:5880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
138⤵
PID:5896

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
139⤵
PID:5912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
140⤵
PID:5928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
141⤵
PID:5944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
142⤵
PID:5960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
143⤵
PID:5976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
144⤵
PID:5992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
145⤵
PID:6008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
146⤵
PID:6024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
147⤵
PID:6044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
148⤵
PID:6060

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
149⤵
PID:6076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
150⤵
PID:6088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
151⤵
PID:6100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
152⤵
PID:6120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
153⤵
PID:6140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
154⤵
PID:5156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
155⤵
PID:5180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
156⤵
PID:5144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
157⤵
PID:6168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
158⤵
PID:6192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
159⤵
PID:6208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
160⤵
PID:6224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
161⤵
PID:6248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
162⤵
PID:6268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
163⤵
PID:6284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
164⤵
PID:6308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
165⤵
PID:6324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
166⤵
PID:6352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
167⤵
PID:6368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
168⤵
PID:6388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
169⤵
PID:6408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
170⤵
PID:6424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
171⤵
PID:6444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
172⤵
PID:6464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
173⤵
PID:6484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
174⤵
PID:6512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
175⤵
PID:6536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
176⤵
PID:6556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
177⤵
PID:6576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
178⤵
PID:6596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
179⤵
PID:6620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
180⤵
PID:6636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
181⤵
PID:6652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
182⤵
PID:6676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
183⤵
PID:6692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
184⤵
PID:6708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
185⤵
PID:6728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
186⤵
PID:6752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
187⤵
PID:6772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
188⤵
PID:6788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
189⤵
PID:6812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
190⤵
PID:6832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
191⤵
PID:6852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
192⤵
PID:6872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
193⤵
PID:6892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
194⤵
PID:6912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
195⤵
PID:6924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
196⤵
PID:6940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
197⤵
PID:6960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
198⤵
PID:6972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
199⤵
PID:6984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
200⤵
PID:6996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
201⤵
PID:7012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
202⤵
PID:7028

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
203⤵
PID:7044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
204⤵
PID:7064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
205⤵
PID:7076

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
206⤵
PID:7096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
207⤵
PID:7112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
208⤵
PID:7128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
209⤵
PID:7144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
210⤵
PID:7164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
211⤵
PID:6260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
212⤵
PID:6336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
213⤵
PID:6416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
214⤵
PID:6584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
215⤵
PID:6780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
216⤵
PID:6880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
217⤵
PID:3372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
218⤵
PID:7180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
219⤵
PID:7196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
220⤵
PID:7212

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
221⤵
PID:7232

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
222⤵
PID:7256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
223⤵
PID:7276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
224⤵
PID:7296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
225⤵
PID:7312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
226⤵
PID:7332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
227⤵
PID:7352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
228⤵
PID:7368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
229⤵
PID:7392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
230⤵
PID:7408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
231⤵
PID:7428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
232⤵
PID:7452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
233⤵
PID:7468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
234⤵
PID:7488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
235⤵
PID:7512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
236⤵
PID:7528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
237⤵
PID:7544

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
238⤵
PID:7564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
239⤵
PID:7580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
240⤵
PID:7600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
241⤵
PID:7636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
242⤵
PID:7652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
243⤵
PID:7672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
244⤵
PID:7692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
245⤵
PID:7704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
246⤵
PID:7732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
247⤵
PID:7768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
248⤵
PID:7784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
249⤵
PID:7804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
250⤵
PID:7828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
251⤵
PID:7864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
252⤵
PID:7884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
253⤵
PID:7904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
254⤵
PID:7928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
255⤵
PID:7960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
256⤵
PID:7996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
257⤵
PID:8012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
258⤵
PID:8036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
259⤵
PID:8068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
260⤵
PID:8088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
261⤵
PID:8112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
262⤵
PID:8132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
263⤵
PID:8156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
264⤵
PID:8172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
265⤵
PID:8188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
266⤵
PID:7284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
267⤵
PID:7400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
268⤵
PID:7480

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
269⤵
PID:7596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
270⤵
PID:7776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
271⤵
PID:7872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
272⤵
PID:8024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
273⤵
PID:8200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
274⤵
PID:8220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
275⤵
PID:8236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
276⤵
PID:8252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
277⤵
PID:8280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
278⤵
PID:8292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
279⤵
PID:8312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
280⤵
PID:8332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
281⤵
PID:8352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
282⤵
PID:8368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
283⤵
PID:8392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
284⤵
PID:8412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
285⤵
PID:8432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
286⤵
PID:8452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
287⤵
PID:8468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
288⤵
PID:8484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
289⤵
PID:8508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
290⤵
PID:8532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
291⤵
PID:8568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
292⤵
PID:8584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
293⤵
PID:8608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
294⤵
PID:8624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
295⤵
PID:8644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
296⤵
PID:8660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
297⤵
PID:8680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
298⤵
PID:8700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
299⤵
PID:8720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
300⤵
PID:8740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
301⤵
PID:8760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
302⤵
PID:8780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
303⤵
PID:8800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
304⤵
PID:8816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
305⤵
PID:8844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
306⤵
PID:8860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
307⤵
PID:8880

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
308⤵
PID:8900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
309⤵
PID:8920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
310⤵
PID:8940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
311⤵
PID:8956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
312⤵
PID:8980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
313⤵
PID:8996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
314⤵
PID:9012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
315⤵
PID:9032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
316⤵
PID:9052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
317⤵
PID:9068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
318⤵
PID:9088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
319⤵
PID:9104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
320⤵
PID:9128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
321⤵
PID:9148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
322⤵
PID:9168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
323⤵
PID:9188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
324⤵
PID:9208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
325⤵
PID:6496

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
326⤵
PID:6820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
327⤵
PID:6160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
328⤵
PID:8688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
329⤵
PID:8772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
330⤵
PID:8876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
331⤵
PID:8988

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
332⤵
PID:9116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
333⤵
PID:9196

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
334⤵
PID:8616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
335⤵
PID:9220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
336⤵
PID:9236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
337⤵
PID:9252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
338⤵
PID:9272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
339⤵
PID:9288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
340⤵
PID:9300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
341⤵
PID:9316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
342⤵
PID:9336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
343⤵
PID:9356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
344⤵
PID:9372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
345⤵
PID:9384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
346⤵
PID:9408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
347⤵
PID:9424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
348⤵
PID:9456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
349⤵
PID:9492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
350⤵
PID:9520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
351⤵
PID:9552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
352⤵
PID:9568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
353⤵
PID:9588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
354⤵
PID:9612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
355⤵
PID:9624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
356⤵
PID:9640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
357⤵
PID:9660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
358⤵
PID:9676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
359⤵
PID:9700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
360⤵
PID:9716

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
361⤵
PID:9736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
362⤵
PID:9752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
363⤵
PID:9768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
364⤵
PID:9784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
365⤵
PID:9804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
366⤵
PID:9820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
367⤵
PID:9836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
368⤵
PID:9852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
369⤵
PID:9872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
370⤵
PID:9892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
371⤵
PID:9904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
372⤵
PID:9920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
373⤵
PID:9940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
374⤵
PID:9960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
375⤵
PID:9976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
376⤵
PID:9996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
377⤵
PID:10012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
378⤵
PID:10036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
379⤵
PID:10052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
380⤵
PID:10068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
381⤵
PID:10088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
382⤵
PID:10100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
383⤵
PID:10120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
384⤵
PID:10136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
385⤵
PID:10152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
386⤵
PID:10172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
387⤵
PID:10192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
388⤵
PID:10204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
389⤵
PID:10224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
390⤵
PID:8540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
391⤵
PID:8596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
392⤵
PID:9448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
393⤵
PID:9652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
394⤵
PID:9864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
395⤵
PID:10044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
396⤵
PID:9328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
397⤵
PID:4376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
398⤵
PID:10256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
399⤵
PID:10272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
400⤵
PID:10292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
401⤵
PID:10308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
402⤵
PID:10324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
403⤵
PID:10348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
404⤵
PID:10360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
405⤵
PID:10384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
406⤵
PID:10396

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
407⤵
PID:10416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
408⤵
PID:10432

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
409⤵
PID:10448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
410⤵
PID:10468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
411⤵
PID:10492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
412⤵
PID:10508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
413⤵
PID:10528

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
414⤵
PID:10552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
415⤵
PID:10568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
416⤵
PID:10588

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
417⤵
PID:10608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
418⤵
PID:10628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
419⤵
PID:10648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
420⤵
PID:10660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
421⤵
PID:10684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
422⤵
PID:10704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
423⤵
PID:10720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
424⤵
PID:10732

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
425⤵
PID:10752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
426⤵
PID:10768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
427⤵
PID:10784

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
428⤵
PID:10800

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
429⤵
PID:10816

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
430⤵
PID:10832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
431⤵
PID:10848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
432⤵
PID:10864

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
433⤵
PID:10876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
434⤵
PID:10892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
435⤵
PID:10908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
436⤵
PID:10924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
437⤵
PID:10940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
438⤵
PID:10956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
439⤵
PID:10972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
440⤵
PID:10984

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
441⤵
PID:10996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
442⤵
PID:11012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
443⤵
PID:11024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
444⤵
PID:11036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
445⤵
PID:11072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
446⤵
PID:11092

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
447⤵
PID:11124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
448⤵
PID:11156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
449⤵
PID:11180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
450⤵
PID:11200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
451⤵
PID:11244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
452⤵
PID:11256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
453⤵
PID:10336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
454⤵
PID:10536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
455⤵
PID:10636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
456⤵
PID:9464

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
457⤵
PID:9444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
458⤵
PID:11276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
459⤵
PID:11288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
460⤵
PID:11312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
461⤵
PID:11328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
462⤵
PID:11348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
463⤵
PID:11364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
464⤵
PID:11380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
465⤵
PID:11392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
466⤵
PID:11412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
467⤵
PID:11424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
468⤵
PID:11444

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
469⤵
PID:11460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
470⤵
PID:11472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
471⤵
PID:11488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
472⤵
PID:11500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
473⤵
PID:11516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
474⤵
PID:11536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
475⤵
PID:11548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
476⤵
PID:11564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
477⤵
PID:11580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
478⤵
PID:11596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
479⤵
PID:11612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
480⤵
PID:11628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
481⤵
PID:11644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
482⤵
PID:11660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
483⤵
PID:11676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
484⤵
PID:11696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
485⤵
PID:11708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
486⤵
PID:11728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
487⤵
PID:11740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
488⤵
PID:11760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
489⤵
PID:11772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
490⤵
PID:11788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
491⤵
PID:11804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
492⤵
PID:11820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
493⤵
PID:11836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
494⤵
PID:11852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
495⤵
PID:11872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
496⤵
PID:11892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
497⤵
PID:11908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
498⤵
PID:11924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
499⤵
PID:11940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
500⤵
PID:11956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
501⤵
PID:11972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
502⤵
PID:11992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
503⤵
PID:12004

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
504⤵
PID:12020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
505⤵
PID:12036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
506⤵
PID:12052

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
507⤵
PID:12068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
508⤵
PID:12084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
509⤵
PID:12100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
510⤵
PID:12116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
511⤵
PID:12132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
512⤵
PID:12144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
513⤵
PID:12164

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
514⤵
PID:12176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
515⤵
PID:12188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
516⤵
PID:12204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
517⤵
PID:12224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
518⤵
PID:12236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
519⤵
PID:12252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
520⤵
PID:12268

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
521⤵
PID:1860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
522⤵
PID:12284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
523⤵
PID:12304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
524⤵
PID:12328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
525⤵
PID:12344

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
526⤵
PID:12360

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
527⤵
PID:12376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
528⤵
PID:12392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
529⤵
PID:12408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
530⤵
PID:12424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
531⤵
PID:12440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
532⤵
PID:12456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
533⤵
PID:12472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
534⤵
PID:12488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
535⤵
PID:12504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
536⤵
PID:12520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
537⤵
PID:12540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
538⤵
PID:12556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
539⤵
PID:12576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
540⤵
PID:12592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
541⤵
PID:12608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
542⤵
PID:12632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
543⤵
PID:12648

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
544⤵
PID:12664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
545⤵
PID:12676

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
546⤵
PID:12692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
547⤵
PID:12708

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
548⤵
PID:12724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
549⤵
PID:12736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
550⤵
PID:12752

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
551⤵
PID:12768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
552⤵
PID:12780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
553⤵
PID:12796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
554⤵
PID:12812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
555⤵
PID:12828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
556⤵
PID:12844

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
557⤵
PID:12860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
558⤵
PID:12872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
559⤵
PID:12888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
560⤵
PID:12900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
561⤵
PID:12912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
562⤵
PID:12924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
563⤵
PID:12936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
564⤵
PID:12952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
565⤵
PID:12964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
566⤵
PID:12980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
567⤵
PID:12992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
568⤵
PID:13008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
569⤵
PID:13024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
570⤵
PID:13040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
571⤵
PID:13056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
572⤵
PID:13068

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
573⤵
PID:13084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
574⤵
PID:13096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
575⤵
PID:13112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
576⤵
PID:13128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
577⤵
PID:13140

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
578⤵
PID:13152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
579⤵
PID:13168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
580⤵
PID:13188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
581⤵
PID:13200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
582⤵
PID:13216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
583⤵
PID:13236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
584⤵
PID:13248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
585⤵
PID:13264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
586⤵
PID:13280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
587⤵
PID:13296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
588⤵
PID:13308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
589⤵
PID:6476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
590⤵
PID:7624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
591⤵
PID:6664

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
592⤵
PID:6500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
593⤵
PID:12620

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
594⤵
PID:4940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
595⤵
PID:5040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
596⤵
PID:4652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
597⤵
PID:4532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
598⤵
PID:832

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
599⤵
PID:4768

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
600⤵
PID:13316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
601⤵
PID:13332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
602⤵
PID:13348

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
603⤵
PID:13364

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
604⤵
PID:13380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
605⤵
PID:13392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
606⤵
PID:13412

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
607⤵
PID:13428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
608⤵
PID:13440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
609⤵
PID:13456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
610⤵
PID:13472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
611⤵
PID:13488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
612⤵
PID:13504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
613⤵
PID:13516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
614⤵
PID:13532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
615⤵
PID:13548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
616⤵
PID:13564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
617⤵
PID:13576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
618⤵
PID:13592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
619⤵
PID:13608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
620⤵
PID:13624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
621⤵
PID:13636

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
622⤵
PID:13652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
623⤵
PID:13668

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
624⤵
PID:13680

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
625⤵
PID:13696

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
626⤵
PID:13712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
627⤵
PID:13728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
628⤵
PID:13744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
629⤵
PID:13760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
630⤵
PID:13776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
631⤵
PID:13792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
632⤵
PID:13808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
633⤵
PID:13824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
634⤵
PID:13836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
635⤵
PID:13852

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
636⤵
PID:13868

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
637⤵
PID:13884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
638⤵
PID:13900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
639⤵
PID:13912

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
640⤵
PID:13928

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
641⤵
PID:13944

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
642⤵
PID:13960

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
643⤵
PID:13976

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
644⤵
PID:13992

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
645⤵
PID:14008

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
646⤵
PID:14024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
647⤵
PID:14040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
648⤵
PID:14056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
649⤵
PID:14072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
650⤵
PID:14084

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
651⤵
PID:14100

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
652⤵
PID:14116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
653⤵
PID:14132

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
654⤵
PID:14148

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
655⤵
PID:14160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
656⤵
PID:14176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
657⤵
PID:14192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
658⤵
PID:14208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
659⤵
PID:14224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
660⤵
PID:14236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
661⤵
PID:14252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
662⤵
PID:14264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
663⤵
PID:14284

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
664⤵
PID:14300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
665⤵
PID:14316

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
666⤵
PID:14332

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
667⤵
PID:14340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
668⤵
PID:14356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
669⤵
PID:14372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
670⤵
PID:14388

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
671⤵
PID:14404

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
672⤵
PID:14420

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
673⤵
PID:14436

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
674⤵
PID:14452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
675⤵
PID:14468

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
676⤵
PID:14484

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
677⤵
PID:14500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
678⤵
PID:14512

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
679⤵
PID:14532

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
680⤵
PID:14548

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
681⤵
PID:14564

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
682⤵
PID:14576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
683⤵
PID:14592

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
684⤵
PID:14608

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
685⤵
PID:14624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
686⤵
PID:14640

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
687⤵
PID:14656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
688⤵
PID:14672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
689⤵
PID:14688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
690⤵
PID:14704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
691⤵
PID:14720

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
692⤵
PID:14736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
693⤵
PID:14748

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
694⤵
PID:14764

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
695⤵
PID:14780

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
696⤵
PID:14796

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
697⤵
PID:14812

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
698⤵
PID:14828

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
699⤵
PID:14840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
700⤵
PID:14860

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
701⤵
PID:14876

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
702⤵
PID:14892

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
703⤵
PID:14908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
704⤵
PID:14924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
705⤵
PID:14940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
706⤵
PID:14956

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
707⤵
PID:14972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
708⤵
PID:15000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
709⤵
PID:15016

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
710⤵
PID:15032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
711⤵
PID:15048

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
712⤵
PID:15064

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
713⤵
PID:15080

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
714⤵
PID:15096

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
715⤵
PID:15112

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
716⤵
PID:15124

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
717⤵
PID:15136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
718⤵
PID:15156

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
719⤵
PID:15172

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
720⤵
PID:15188

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
721⤵
PID:15204

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
722⤵
PID:15220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
723⤵
PID:15236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
724⤵
PID:15248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
725⤵
PID:15260

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
726⤵
PID:15276

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
727⤵
PID:15292

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
728⤵
PID:15308

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
729⤵
PID:15324

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
730⤵
PID:15340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
731⤵
PID:15356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
732⤵
PID:15368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
733⤵
PID:15380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
734⤵
PID:15392

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
735⤵
PID:15408

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
736⤵
PID:15424

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
737⤵
PID:15440

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
738⤵
PID:15456

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
739⤵
PID:15472

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
740⤵
PID:15488

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
741⤵
PID:15504

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
742⤵
PID:15516

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
743⤵
PID:15536

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
744⤵
PID:15552

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
745⤵
PID:15568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
746⤵
PID:15580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
747⤵
PID:15596

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
748⤵
PID:15612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
749⤵
PID:15628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
750⤵
PID:15644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
751⤵
PID:15660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
752⤵
PID:15672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
753⤵
PID:15692

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
754⤵
PID:15704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
755⤵
PID:15724

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
756⤵
PID:15740

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
757⤵
PID:15756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
758⤵
PID:15772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
759⤵
PID:15788

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
760⤵
PID:15804

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
761⤵
PID:15820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
762⤵
PID:15836

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
763⤵
PID:15848

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
764⤵
PID:15872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
765⤵
PID:15904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
766⤵
PID:15920

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
767⤵
PID:15936

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
768⤵
PID:15952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
769⤵
PID:15972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
770⤵
PID:16000

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
771⤵
PID:16020

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
772⤵
PID:16040

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
773⤵
PID:16056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
774⤵
PID:16072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
775⤵
PID:16088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
776⤵
PID:16104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
777⤵
PID:16116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
778⤵
PID:16128

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
779⤵
PID:16144

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
780⤵
PID:16160

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
781⤵
PID:16176

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
782⤵
PID:16192

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
783⤵
PID:16208

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
784⤵
PID:16224

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
785⤵
PID:16236

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
786⤵
PID:16248

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
787⤵
PID:16264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
788⤵
PID:16280

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
789⤵
PID:16296

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
790⤵
PID:16312

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
791⤵
PID:16328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
792⤵
PID:16340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
793⤵
PID:16356

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
794⤵
PID:16372

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
795⤵
PID:4684

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
796⤵
PID:756

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
797⤵
PID:4972

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
798⤵
PID:4624

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
799⤵
PID:4908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
800⤵
PID:4264

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
801⤵
PID:4736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
802⤵
PID:4500

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
803⤵
PID:4036

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
804⤵
PID:16400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
805⤵
PID:16416

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
806⤵
PID:16428

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
807⤵
PID:16448

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
808⤵
PID:16460

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
809⤵
PID:16476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
810⤵
PID:16492

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
811⤵
PID:16508

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
812⤵
PID:16520

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
813⤵
PID:16540

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
814⤵
PID:16556

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
815⤵
PID:16568

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
816⤵
PID:16584

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
817⤵
PID:16600

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
818⤵
PID:16616

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
819⤵
PID:16628

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
820⤵
PID:16644

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
821⤵
PID:16656

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
822⤵
PID:16672

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
823⤵
PID:16688

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
824⤵
PID:16700

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
825⤵
PID:16712

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
826⤵
PID:16728

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
827⤵
PID:16744

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
828⤵
PID:16760

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
829⤵
PID:16772

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
830⤵
PID:16792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
831⤵
PID:16808

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
832⤵
PID:16824

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
833⤵
PID:16840

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
834⤵
PID:16856

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
835⤵
PID:16872

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
836⤵
PID:16888

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
837⤵
PID:16900

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
838⤵
PID:16916

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
839⤵
PID:16932

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
840⤵
PID:16948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
841⤵
PID:16964

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
842⤵
PID:16980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
843⤵
PID:16996

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
844⤵
PID:17012

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
845⤵
PID:17024

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
846⤵
PID:17044

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
847⤵
PID:17056

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
848⤵
PID:17072

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
849⤵
PID:17088

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
850⤵
PID:17104

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
851⤵
PID:17120

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
852⤵
PID:17136

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
853⤵
PID:17152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
854⤵
PID:17168

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
855⤵
PID:17184

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
856⤵
PID:17200

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
857⤵
PID:17216

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
858⤵
PID:17228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
859⤵
PID:17244

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
860⤵
PID:17256

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
861⤵
PID:17272

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
862⤵
PID:17288

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
863⤵
PID:17304

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
864⤵
PID:17320

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
865⤵
PID:17336

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
866⤵
PID:17352

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
867⤵
PID:17368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
868⤵
PID:17384

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
869⤵
PID:17400

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
870⤵
PID:15884

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
871⤵
PID:16032

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
872⤵
PID:2908

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
873⤵
PID:632

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1960-57-0x0000000000140000-0x0000000000162000-memory.dll,#1
874⤵
PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/64-190-0x0000000000000000-mapping.dmp

Download
memory/216-139-0x0000000000000000-mapping.dmp

Download
memory/372-138-0x0000000000000000-mapping.dmp

Download
memory/384-186-0x0000000000000000-mapping.dmp

Download
memory/628-135-0x0000000000000000-mapping.dmp

Download
memory/876-191-0x0000000000000000-mapping.dmp

Download
memory/1104-160-0x0000000000000000-mapping.dmp

Download
memory/1212-142-0x0000000000000000-mapping.dmp

Download
memory/1216-145-0x0000000000000000-mapping.dmp

Download
memory/1272-144-0x0000000000000000-mapping.dmp

Download
memory/1396-147-0x0000000000000000-mapping.dmp

Download
memory/1424-148-0x0000000000000000-mapping.dmp

Download
memory/1520-194-0x0000000000000000-mapping.dmp

Download
memory/1552-177-0x0000000000000000-mapping.dmp

Download
memory/1612-161-0x0000000000000000-mapping.dmp

Download
memory/1644-158-0x0000000000000000-mapping.dmp

Download
memory/1664-156-0x0000000000000000-mapping.dmp

Download
memory/1712-140-0x0000000000000000-mapping.dmp

Download
memory/1888-173-0x0000000000000000-mapping.dmp

Download
memory/2112-185-0x0000000000000000-mapping.dmp

Download
memory/2364-157-0x0000000000000000-mapping.dmp

Download
memory/2400-166-0x0000000000000000-mapping.dmp

Download
memory/2440-183-0x0000000000000000-mapping.dmp

Download
memory/2520-180-0x0000000000000000-mapping.dmp

Download
memory/2632-188-0x0000000000000000-mapping.dmp

Download
memory/2712-174-0x0000000000000000-mapping.dmp

Download
memory/2740-182-0x0000000000000000-mapping.dmp

Download
memory/2784-192-0x0000000000000000-mapping.dmp

Download
memory/2844-133-0x0000000000000000-mapping.dmp

Download
memory/2992-175-0x0000000000000000-mapping.dmp

Download
memory/3016-179-0x0000000000000000-mapping.dmp

Download
memory/3096-150-0x0000000000000000-mapping.dmp

Download
memory/3120-152-0x0000000000000000-mapping.dmp

Download
memory/3236-159-0x0000000000000000-mapping.dmp

Download
memory/3348-163-0x0000000000000000-mapping.dmp

Download
memory/3488-164-0x0000000000000000-mapping.dmp

Download
memory/3516-153-0x0000000000000000-mapping.dmp

Download
memory/3520-162-0x0000000000000000-mapping.dmp

Download
memory/3552-181-0x0000000000000000-mapping.dmp

Download
memory/3580-168-0x0000000000000000-mapping.dmp

Download
memory/3624-146-0x0000000000000000-mapping.dmp

Download
memory/3652-137-0x0000000000000000-mapping.dmp

Download
memory/3768-143-0x0000000000000000-mapping.dmp

Download
memory/3788-167-0x0000000000000000-mapping.dmp

Download
memory/3796-184-0x0000000000000000-mapping.dmp

Download
memory/3812-154-0x0000000000000000-mapping.dmp

Download
memory/3868-193-0x0000000000000000-mapping.dmp

Download
memory/3900-141-0x0000000000000000-mapping.dmp

Download
memory/4008-149-0x0000000000000000-mapping.dmp

Download
memory/4072-195-0x0000000000000000-mapping.dmp

Download
memory/4116-171-0x0000000000000000-mapping.dmp

Download
memory/4120-189-0x0000000000000000-mapping.dmp

Download
memory/4192-134-0x0000000000000000-mapping.dmp

Download
memory/4220-170-0x0000000000000000-mapping.dmp

Download
memory/4248-136-0x0000000000000000-mapping.dmp

Download
memory/4280-176-0x0000000000000000-mapping.dmp

Download
memory/4368-132-0x0000000000000000-mapping.dmp

Download
memory/4428-169-0x0000000000000000-mapping.dmp

Download
memory/4560-178-0x0000000000000000-mapping.dmp

Download
memory/4564-172-0x0000000000000000-mapping.dmp

Download
memory/4692-151-0x0000000000000000-mapping.dmp

Download
memory/4900-155-0x0000000000000000-mapping.dmp

Download
memory/5080-165-0x0000000000000000-mapping.dmp

Download
memory/5096-187-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing