Analysis Overview
SHA256
e2b31d334c6e2942d058dc138b3890e67686bda3b8befbbbbd27d36504807b1d
Threat Level: Known bad
The file 1684-57-0x00000000003F0000-0x0000000000412000-memory.dmp was found to be: Known bad.
Malicious Activity Summary
Qakbot family
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-01-03 16:13
Signatures
Qakbot family
Analysis: behavioral2
Detonation Overview
Submitted
2023-01-03 16:13
Reported
2023-01-03 16:16
Platform
win10v2004-20220812-en
Max time kernel
97s
Max time network
126s
Command Line
Signatures
Suspicious use of WriteProcessMemory
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
Network
| Country | Destination | Domain | Proto |
| N/A | 64.225.31.157:3333 | tcp | |
| N/A | 93.184.220.29:80 | tcp | |
| N/A | 93.184.220.29:80 | tcp | |
| N/A | 20.223.24.244:443 | tcp | |
| N/A | 13.69.239.72:443 | tcp | |
| N/A | 93.184.220.29:80 | tcp | |
| N/A | 93.184.221.240:80 | tcp | |
| N/A | 104.80.225.205:443 | tcp |
Files
memory/4548-132-0x0000000000000000-mapping.dmp
memory/1856-133-0x0000000000000000-mapping.dmp
memory/1076-134-0x0000000000000000-mapping.dmp
memory/4240-136-0x0000000000000000-mapping.dmp
memory/3112-135-0x0000000000000000-mapping.dmp
memory/3736-137-0x0000000000000000-mapping.dmp
memory/860-138-0x0000000000000000-mapping.dmp
memory/2016-139-0x0000000000000000-mapping.dmp
memory/3136-140-0x0000000000000000-mapping.dmp
memory/3320-141-0x0000000000000000-mapping.dmp
memory/1420-142-0x0000000000000000-mapping.dmp
memory/4956-143-0x0000000000000000-mapping.dmp
memory/4380-144-0x0000000000000000-mapping.dmp
memory/4632-145-0x0000000000000000-mapping.dmp
memory/4488-146-0x0000000000000000-mapping.dmp
memory/620-147-0x0000000000000000-mapping.dmp
memory/4448-148-0x0000000000000000-mapping.dmp
memory/260-149-0x0000000000000000-mapping.dmp
memory/224-150-0x0000000000000000-mapping.dmp
memory/2600-151-0x0000000000000000-mapping.dmp
memory/4012-152-0x0000000000000000-mapping.dmp
memory/3076-153-0x0000000000000000-mapping.dmp
memory/436-154-0x0000000000000000-mapping.dmp
memory/632-155-0x0000000000000000-mapping.dmp
memory/4256-156-0x0000000000000000-mapping.dmp
memory/3140-157-0x0000000000000000-mapping.dmp
memory/3600-158-0x0000000000000000-mapping.dmp
memory/3536-159-0x0000000000000000-mapping.dmp
memory/3716-160-0x0000000000000000-mapping.dmp
memory/396-161-0x0000000000000000-mapping.dmp
memory/3756-162-0x0000000000000000-mapping.dmp
memory/4276-163-0x0000000000000000-mapping.dmp
memory/4768-164-0x0000000000000000-mapping.dmp
memory/820-165-0x0000000000000000-mapping.dmp
memory/3552-166-0x0000000000000000-mapping.dmp
memory/3228-167-0x0000000000000000-mapping.dmp
memory/1860-168-0x0000000000000000-mapping.dmp
memory/3360-169-0x0000000000000000-mapping.dmp
memory/1620-170-0x0000000000000000-mapping.dmp
memory/4272-171-0x0000000000000000-mapping.dmp
memory/1312-172-0x0000000000000000-mapping.dmp
memory/4568-173-0x0000000000000000-mapping.dmp
memory/4868-174-0x0000000000000000-mapping.dmp
memory/4472-175-0x0000000000000000-mapping.dmp
memory/1568-176-0x0000000000000000-mapping.dmp
memory/3944-177-0x0000000000000000-mapping.dmp
memory/1332-178-0x0000000000000000-mapping.dmp
memory/3160-179-0x0000000000000000-mapping.dmp
memory/4288-180-0x0000000000000000-mapping.dmp
memory/3648-181-0x0000000000000000-mapping.dmp
memory/1012-182-0x0000000000000000-mapping.dmp
memory/3496-183-0x0000000000000000-mapping.dmp
memory/2652-184-0x0000000000000000-mapping.dmp
memory/1452-185-0x0000000000000000-mapping.dmp
memory/796-186-0x0000000000000000-mapping.dmp
memory/1120-187-0x0000000000000000-mapping.dmp
memory/3472-188-0x0000000000000000-mapping.dmp
memory/2944-189-0x0000000000000000-mapping.dmp
memory/760-190-0x0000000000000000-mapping.dmp
memory/3580-191-0x0000000000000000-mapping.dmp
memory/3800-192-0x0000000000000000-mapping.dmp
memory/2072-193-0x0000000000000000-mapping.dmp
memory/2344-194-0x0000000000000000-mapping.dmp
memory/2932-195-0x0000000000000000-mapping.dmp
Analysis: behavioral1
Detonation Overview
Submitted
2023-01-03 16:13
Reported
2023-01-03 16:16
Platform
win7-20221111-en
Max time kernel
29s
Max time network
31s
Command Line
Signatures
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 1468 wrote to memory of 1360 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1684-57-0x00000000003F0000-0x0000000000412000-memory.dll,#1
Network
Files
memory/1360-54-0x0000000000000000-mapping.dmp
memory/1360-55-0x0000000075761000-0x0000000075763000-memory.dmp