Malware Analysis Report

2025-05-05 23:44

Sample ID 230203-kyx2csde54
Target 1796-57-0x0000000000720000-0x0000000000743000-memory.dmp
SHA256 4345341f6c062c955f5d7dc811135bbe5a26685c773d521f081a19218e86aceb
Tags
bb12 1675352134 qakbot
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

4345341f6c062c955f5d7dc811135bbe5a26685c773d521f081a19218e86aceb

Threat Level: Known bad

The file 1796-57-0x0000000000720000-0x0000000000743000-memory.dmp was found to be: Known bad.

Malicious Activity Summary

bb12 1675352134 qakbot

Qakbot family

Suspicious use of WriteProcessMemory

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-02-03 09:01

Signatures

Qakbot family

qakbot

Analysis: behavioral1

Detonation Overview

Submitted

2023-02-03 09:01

Reported

2023-02-03 09:03

Platform

win7-20220901-en

Max time kernel

45s

Max time network

50s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1808 wrote to memory of 1056 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

Network

N/A

Files

memory/1056-54-0x0000000000000000-mapping.dmp

memory/1056-55-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2023-02-03 09:01

Reported

2023-02-03 09:03

Platform

win10v2004-20220812-en

Max time kernel

64s

Max time network

144s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4656 wrote to memory of 4860 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4656 wrote to memory of 4860 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4656 wrote to memory of 4860 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4860 wrote to memory of 3440 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4860 wrote to memory of 3440 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4860 wrote to memory of 3440 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3440 wrote to memory of 2200 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3440 wrote to memory of 2200 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3440 wrote to memory of 2200 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2200 wrote to memory of 4260 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2200 wrote to memory of 4260 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2200 wrote to memory of 4260 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4260 wrote to memory of 2520 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4260 wrote to memory of 2520 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4260 wrote to memory of 2520 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2520 wrote to memory of 2556 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2520 wrote to memory of 2556 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2520 wrote to memory of 2556 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2556 wrote to memory of 1428 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2556 wrote to memory of 1428 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2556 wrote to memory of 1428 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1428 wrote to memory of 2848 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1428 wrote to memory of 2848 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1428 wrote to memory of 2848 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2848 wrote to memory of 956 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2848 wrote to memory of 956 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2848 wrote to memory of 956 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 956 wrote to memory of 2132 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 956 wrote to memory of 2132 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 956 wrote to memory of 2132 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2132 wrote to memory of 2532 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2132 wrote to memory of 2532 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2132 wrote to memory of 2532 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2532 wrote to memory of 3576 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2532 wrote to memory of 3576 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2532 wrote to memory of 3576 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3576 wrote to memory of 4920 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3576 wrote to memory of 4920 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3576 wrote to memory of 4920 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4920 wrote to memory of 4844 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4920 wrote to memory of 4844 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4920 wrote to memory of 4844 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4844 wrote to memory of 4892 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4844 wrote to memory of 4892 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4844 wrote to memory of 4892 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4892 wrote to memory of 4808 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4892 wrote to memory of 4808 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4892 wrote to memory of 4808 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4808 wrote to memory of 4792 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4808 wrote to memory of 4792 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4808 wrote to memory of 4792 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4792 wrote to memory of 3208 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4792 wrote to memory of 3208 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4792 wrote to memory of 3208 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3208 wrote to memory of 2372 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3208 wrote to memory of 2372 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3208 wrote to memory of 2372 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2372 wrote to memory of 5060 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2372 wrote to memory of 5060 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2372 wrote to memory of 5060 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5060 wrote to memory of 4244 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5060 wrote to memory of 4244 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5060 wrote to memory of 4244 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 4244 wrote to memory of 5112 N/A C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\1796-57-0x0000000000720000-0x0000000000743000-memory.dll,#1

Network

Country Destination Domain Proto
US 93.184.221.240:80 tcp
US 93.184.221.240:80 tcp
US 52.168.117.170:443 tcp
US 93.184.221.240:80 tcp

Files

memory/4860-132-0x0000000000000000-mapping.dmp

memory/3440-133-0x0000000000000000-mapping.dmp

memory/2200-134-0x0000000000000000-mapping.dmp

memory/4260-135-0x0000000000000000-mapping.dmp

memory/2520-136-0x0000000000000000-mapping.dmp

memory/2556-137-0x0000000000000000-mapping.dmp

memory/1428-138-0x0000000000000000-mapping.dmp

memory/2848-139-0x0000000000000000-mapping.dmp

memory/956-140-0x0000000000000000-mapping.dmp

memory/2132-141-0x0000000000000000-mapping.dmp

memory/2532-142-0x0000000000000000-mapping.dmp

memory/3576-143-0x0000000000000000-mapping.dmp

memory/4920-144-0x0000000000000000-mapping.dmp

memory/4844-145-0x0000000000000000-mapping.dmp

memory/4892-146-0x0000000000000000-mapping.dmp

memory/4808-147-0x0000000000000000-mapping.dmp

memory/4792-148-0x0000000000000000-mapping.dmp

memory/3208-149-0x0000000000000000-mapping.dmp

memory/2372-150-0x0000000000000000-mapping.dmp

memory/5060-151-0x0000000000000000-mapping.dmp

memory/4244-152-0x0000000000000000-mapping.dmp

memory/5112-153-0x0000000000000000-mapping.dmp

memory/1980-154-0x0000000000000000-mapping.dmp

memory/4256-155-0x0000000000000000-mapping.dmp

memory/2536-156-0x0000000000000000-mapping.dmp

memory/424-157-0x0000000000000000-mapping.dmp

memory/3196-158-0x0000000000000000-mapping.dmp

memory/3960-159-0x0000000000000000-mapping.dmp

memory/1232-160-0x0000000000000000-mapping.dmp

memory/4264-161-0x0000000000000000-mapping.dmp

memory/4736-162-0x0000000000000000-mapping.dmp

memory/384-163-0x0000000000000000-mapping.dmp

memory/316-164-0x0000000000000000-mapping.dmp

memory/216-165-0x0000000000000000-mapping.dmp

memory/4756-166-0x0000000000000000-mapping.dmp

memory/2708-167-0x0000000000000000-mapping.dmp

memory/1956-168-0x0000000000000000-mapping.dmp

memory/4392-169-0x0000000000000000-mapping.dmp

memory/2160-170-0x0000000000000000-mapping.dmp

memory/1600-171-0x0000000000000000-mapping.dmp

memory/3452-172-0x0000000000000000-mapping.dmp

memory/3492-173-0x0000000000000000-mapping.dmp

memory/3596-174-0x0000000000000000-mapping.dmp

memory/4052-175-0x0000000000000000-mapping.dmp

memory/3500-176-0x0000000000000000-mapping.dmp

memory/1968-177-0x0000000000000000-mapping.dmp

memory/1916-178-0x0000000000000000-mapping.dmp

memory/4176-179-0x0000000000000000-mapping.dmp

memory/3360-180-0x0000000000000000-mapping.dmp

memory/2072-181-0x0000000000000000-mapping.dmp

memory/4928-182-0x0000000000000000-mapping.dmp

memory/1244-183-0x0000000000000000-mapping.dmp

memory/3940-184-0x0000000000000000-mapping.dmp

memory/1492-185-0x0000000000000000-mapping.dmp

memory/3484-186-0x0000000000000000-mapping.dmp

memory/1328-187-0x0000000000000000-mapping.dmp

memory/2812-188-0x0000000000000000-mapping.dmp

memory/960-189-0x0000000000000000-mapping.dmp

memory/3200-190-0x0000000000000000-mapping.dmp

memory/2580-191-0x0000000000000000-mapping.dmp

memory/3420-192-0x0000000000000000-mapping.dmp

memory/756-193-0x0000000000000000-mapping.dmp

memory/2780-194-0x0000000000000000-mapping.dmp

memory/1056-195-0x0000000000000000-mapping.dmp