Malware Analysis Report

2025-05-28 17:34

Sample ID 230103-tpaddafb6w
Target 1684-57-0x00000000003F0000-0x0000000000412000-memory.dmp
SHA256 e2b31d334c6e2942d058dc138b3890e67686bda3b8befbbbbd27d36504807b1d
Tags
bb 1663148750 qakbot
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e2b31d334c6e2942d058dc138b3890e67686bda3b8befbbbbd27d36504807b1d

Threat Level: Known bad

The file 1684-57-0x00000000003F0000-0x0000000000412000-memory.dmp was found to be: Known bad.

Malicious Activity Summary

bb 1663148750 qakbot

Qakbot family

Suspicious use of WriteProcessMemory

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-01-03 16:13

Signatures

Qakbot family

qakbot

Analysis: behavioral2

Detonation Overview

Submitted

2023-01-03 16:13

Reported

2023-01-03 16:16

Platform

win10v2004-20220812-en

Max time kernel

97s

Max time network

126s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4984 wrote to memory of 4548 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4984 wrote to memory of 4548 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4984 wrote to memory of 4548 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4548 wrote to memory of 1856 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4548 wrote to memory of 1856 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4548 wrote to memory of 1856 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1856 wrote to memory of 1076 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1856 wrote to memory of 1076 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1856 wrote to memory of 1076 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1076 wrote to memory of 3112 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1076 wrote to memory of 3112 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1076 wrote to memory of 3112 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3112 wrote to memory of 4240 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3112 wrote to memory of 4240 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3112 wrote to memory of 4240 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4240 wrote to memory of 3736 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4240 wrote to memory of 3736 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4240 wrote to memory of 3736 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3736 wrote to memory of 860 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3736 wrote to memory of 860 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3736 wrote to memory of 860 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 860 wrote to memory of 2016 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 860 wrote to memory of 2016 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 860 wrote to memory of 2016 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2016 wrote to memory of 3136 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2016 wrote to memory of 3136 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2016 wrote to memory of 3136 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3136 wrote to memory of 3320 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3136 wrote to memory of 3320 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3136 wrote to memory of 3320 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3320 wrote to memory of 1420 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3320 wrote to memory of 1420 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3320 wrote to memory of 1420 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1420 wrote to memory of 4956 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1420 wrote to memory of 4956 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1420 wrote to memory of 4956 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4956 wrote to memory of 4380 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4956 wrote to memory of 4380 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4956 wrote to memory of 4380 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4380 wrote to memory of 4632 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4380 wrote to memory of 4632 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4380 wrote to memory of 4632 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4632 wrote to memory of 4488 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4632 wrote to memory of 4488 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4632 wrote to memory of 4488 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4488 wrote to memory of 620 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4488 wrote to memory of 620 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4488 wrote to memory of 620 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 620 wrote to memory of 4448 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 620 wrote to memory of 4448 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 620 wrote to memory of 4448 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4448 wrote to memory of 260 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4448 wrote to memory of 260 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4448 wrote to memory of 260 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 260 wrote to memory of 224 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 260 wrote to memory of 224 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 260 wrote to memory of 224 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 224 wrote to memory of 2600 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 224 wrote to memory of 2600 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 224 wrote to memory of 2600 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2600 wrote to memory of 4012 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2600 wrote to memory of 4012 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2600 wrote to memory of 4012 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4012 wrote to memory of 3076 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

Network

Country Destination Domain Proto
N/A 64.225.31.157:3333 tcp
N/A 93.184.220.29:80 tcp
N/A 93.184.220.29:80 tcp
N/A 20.223.24.244:443 tcp
N/A 13.69.239.72:443 tcp
N/A 93.184.220.29:80 tcp
N/A 93.184.221.240:80 tcp
N/A 104.80.225.205:443 tcp

Files

memory/4548-132-0x0000000000000000-mapping.dmp

memory/1856-133-0x0000000000000000-mapping.dmp

memory/1076-134-0x0000000000000000-mapping.dmp

memory/4240-136-0x0000000000000000-mapping.dmp

memory/3112-135-0x0000000000000000-mapping.dmp

memory/3736-137-0x0000000000000000-mapping.dmp

memory/860-138-0x0000000000000000-mapping.dmp

memory/2016-139-0x0000000000000000-mapping.dmp

memory/3136-140-0x0000000000000000-mapping.dmp

memory/3320-141-0x0000000000000000-mapping.dmp

memory/1420-142-0x0000000000000000-mapping.dmp

memory/4956-143-0x0000000000000000-mapping.dmp

memory/4380-144-0x0000000000000000-mapping.dmp

memory/4632-145-0x0000000000000000-mapping.dmp

memory/4488-146-0x0000000000000000-mapping.dmp

memory/620-147-0x0000000000000000-mapping.dmp

memory/4448-148-0x0000000000000000-mapping.dmp

memory/260-149-0x0000000000000000-mapping.dmp

memory/224-150-0x0000000000000000-mapping.dmp

memory/2600-151-0x0000000000000000-mapping.dmp

memory/4012-152-0x0000000000000000-mapping.dmp

memory/3076-153-0x0000000000000000-mapping.dmp

memory/436-154-0x0000000000000000-mapping.dmp

memory/632-155-0x0000000000000000-mapping.dmp

memory/4256-156-0x0000000000000000-mapping.dmp

memory/3140-157-0x0000000000000000-mapping.dmp

memory/3600-158-0x0000000000000000-mapping.dmp

memory/3536-159-0x0000000000000000-mapping.dmp

memory/3716-160-0x0000000000000000-mapping.dmp

memory/396-161-0x0000000000000000-mapping.dmp

memory/3756-162-0x0000000000000000-mapping.dmp

memory/4276-163-0x0000000000000000-mapping.dmp

memory/4768-164-0x0000000000000000-mapping.dmp

memory/820-165-0x0000000000000000-mapping.dmp

memory/3552-166-0x0000000000000000-mapping.dmp

memory/3228-167-0x0000000000000000-mapping.dmp

memory/1860-168-0x0000000000000000-mapping.dmp

memory/3360-169-0x0000000000000000-mapping.dmp

memory/1620-170-0x0000000000000000-mapping.dmp

memory/4272-171-0x0000000000000000-mapping.dmp

memory/1312-172-0x0000000000000000-mapping.dmp

memory/4568-173-0x0000000000000000-mapping.dmp

memory/4868-174-0x0000000000000000-mapping.dmp

memory/4472-175-0x0000000000000000-mapping.dmp

memory/1568-176-0x0000000000000000-mapping.dmp

memory/3944-177-0x0000000000000000-mapping.dmp

memory/1332-178-0x0000000000000000-mapping.dmp

memory/3160-179-0x0000000000000000-mapping.dmp

memory/4288-180-0x0000000000000000-mapping.dmp

memory/3648-181-0x0000000000000000-mapping.dmp

memory/1012-182-0x0000000000000000-mapping.dmp

memory/3496-183-0x0000000000000000-mapping.dmp

memory/2652-184-0x0000000000000000-mapping.dmp

memory/1452-185-0x0000000000000000-mapping.dmp

memory/796-186-0x0000000000000000-mapping.dmp

memory/1120-187-0x0000000000000000-mapping.dmp

memory/3472-188-0x0000000000000000-mapping.dmp

memory/2944-189-0x0000000000000000-mapping.dmp

memory/760-190-0x0000000000000000-mapping.dmp

memory/3580-191-0x0000000000000000-mapping.dmp

memory/3800-192-0x0000000000000000-mapping.dmp

memory/2072-193-0x0000000000000000-mapping.dmp

memory/2344-194-0x0000000000000000-mapping.dmp

memory/2932-195-0x0000000000000000-mapping.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2023-01-03 16:13

Reported

2023-01-03 16:16

Platform

win7-20221111-en

Max time kernel

29s

Max time network

31s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1360 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1

Network

N/A

Files

memory/1360-54-0x0000000000000000-mapping.dmp

memory/1360-55-0x0000000075761000-0x0000000075763000-memory.dmp