Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
02-03-2024 13:55
Behavioral task
behavioral1
Sample
2024-54-0x0000000000920000-0x0000000000943000-memory.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-54-0x0000000000920000-0x0000000000943000-memory.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2024-54-0x0000000000920000-0x0000000000943000-memory.dll
-
Size
140KB
-
MD5
04d328430969a98fc0f3c880549efc76
-
SHA1
7f2340ce7bc20bf91411f647aa89b4cf0038f000
-
SHA256
c7af605f313be3a2fb4f8723f06debea52d65634b5708539a02d68cb8d7a629c
-
SHA512
af59af56204210d936ac897c870b99bdc728ed0b0f37cf95d53e9b6320f164bb07ae7ca08afa4a6a6df2c88bcabc5325571a95fc10d740bf1bcb9cfac2a957bb
-
SSDEEP
3072:maUblT1tz2in4h7N4ww7ymYAmJhBv2MTBf/lrEns3m:ZUbJn4hx4wQ9mJTv2MTBXlqs3
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
rundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exerundll32.exedescription pid Process procid_target PID 440 wrote to memory of 4744 440 rundll32.exe 93 PID 440 wrote to memory of 4744 440 rundll32.exe 93 PID 440 wrote to memory of 4744 440 rundll32.exe 93 PID 4744 wrote to memory of 1088 4744 rundll32.exe 94 PID 4744 wrote to memory of 1088 4744 rundll32.exe 94 PID 4744 wrote to memory of 1088 4744 rundll32.exe 94 PID 1088 wrote to memory of 3896 1088 rundll32.exe 95 PID 1088 wrote to memory of 3896 1088 rundll32.exe 95 PID 1088 wrote to memory of 3896 1088 rundll32.exe 95 PID 3896 wrote to memory of 4280 3896 rundll32.exe 96 PID 3896 wrote to memory of 4280 3896 rundll32.exe 96 PID 3896 wrote to memory of 4280 3896 rundll32.exe 96 PID 4280 wrote to memory of 60 4280 rundll32.exe 97 PID 4280 wrote to memory of 60 4280 rundll32.exe 97 PID 4280 wrote to memory of 60 4280 rundll32.exe 97 PID 60 wrote to memory of 1688 60 rundll32.exe 98 PID 60 wrote to memory of 1688 60 rundll32.exe 98 PID 60 wrote to memory of 1688 60 rundll32.exe 98 PID 1688 wrote to memory of 4308 1688 rundll32.exe 99 PID 1688 wrote to memory of 4308 1688 rundll32.exe 99 PID 1688 wrote to memory of 4308 1688 rundll32.exe 99 PID 4308 wrote to memory of 4976 4308 rundll32.exe 100 PID 4308 wrote to memory of 4976 4308 rundll32.exe 100 PID 4308 wrote to memory of 4976 4308 rundll32.exe 100 PID 4976 wrote to memory of 1992 4976 rundll32.exe 101 PID 4976 wrote to memory of 1992 4976 rundll32.exe 101 PID 4976 wrote to memory of 1992 4976 rundll32.exe 101 PID 1992 wrote to memory of 820 1992 rundll32.exe 102 PID 1992 wrote to memory of 820 1992 rundll32.exe 102 PID 1992 wrote to memory of 820 1992 rundll32.exe 102 PID 820 wrote to memory of 2112 820 rundll32.exe 103 PID 820 wrote to memory of 2112 820 rundll32.exe 103 PID 820 wrote to memory of 2112 820 rundll32.exe 103 PID 2112 wrote to memory of 3132 2112 rundll32.exe 104 PID 2112 wrote to memory of 3132 2112 rundll32.exe 104 PID 2112 wrote to memory of 3132 2112 rundll32.exe 104 PID 3132 wrote to memory of 3632 3132 rundll32.exe 106 PID 3132 wrote to memory of 3632 3132 rundll32.exe 106 PID 3132 wrote to memory of 3632 3132 rundll32.exe 106 PID 3632 wrote to memory of 4048 3632 rundll32.exe 107 PID 3632 wrote to memory of 4048 3632 rundll32.exe 107 PID 3632 wrote to memory of 4048 3632 rundll32.exe 107 PID 4048 wrote to memory of 748 4048 rundll32.exe 108 PID 4048 wrote to memory of 748 4048 rundll32.exe 108 PID 4048 wrote to memory of 748 4048 rundll32.exe 108 PID 748 wrote to memory of 2204 748 rundll32.exe 109 PID 748 wrote to memory of 2204 748 rundll32.exe 109 PID 748 wrote to memory of 2204 748 rundll32.exe 109 PID 2204 wrote to memory of 2028 2204 rundll32.exe 110 PID 2204 wrote to memory of 2028 2204 rundll32.exe 110 PID 2204 wrote to memory of 2028 2204 rundll32.exe 110 PID 2028 wrote to memory of 1008 2028 rundll32.exe 111 PID 2028 wrote to memory of 1008 2028 rundll32.exe 111 PID 2028 wrote to memory of 1008 2028 rundll32.exe 111 PID 1008 wrote to memory of 708 1008 rundll32.exe 112 PID 1008 wrote to memory of 708 1008 rundll32.exe 112 PID 1008 wrote to memory of 708 1008 rundll32.exe 112 PID 708 wrote to memory of 2336 708 rundll32.exe 113 PID 708 wrote to memory of 2336 708 rundll32.exe 113 PID 708 wrote to memory of 2336 708 rundll32.exe 113 PID 2336 wrote to memory of 4104 2336 rundll32.exe 114 PID 2336 wrote to memory of 4104 2336 rundll32.exe 114 PID 2336 wrote to memory of 4104 2336 rundll32.exe 114 PID 4104 wrote to memory of 5108 4104 rundll32.exe 115
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:440 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:4744 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:1088 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:3896 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:4280 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:60 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:1688 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:4308 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:4976 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:1992 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#111⤵
- Suspicious use of WriteProcessMemory
PID:820 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:2112 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:3132 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:3632 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:4048 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:748 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:2204 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:2028 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:1008 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:708 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:2336 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:4104 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#123⤵PID:5108
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#124⤵PID:5044
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#125⤵PID:4776
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#126⤵PID:4544
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#127⤵PID:3092
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#128⤵PID:4500
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#129⤵PID:1556
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#130⤵PID:4676
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#131⤵PID:3368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#132⤵PID:2592
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#133⤵PID:1892
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#134⤵PID:3656
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#135⤵PID:3624
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#136⤵PID:4892
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#137⤵PID:2108
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#138⤵PID:1204
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#139⤵PID:3276
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#140⤵PID:4332
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#141⤵PID:4856
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#142⤵PID:2304
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#143⤵PID:1300
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#144⤵PID:4456
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#145⤵PID:2480
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#146⤵PID:4876
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#147⤵PID:3300
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#148⤵PID:4624
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#149⤵PID:2712
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#150⤵PID:4388
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#151⤵PID:3516
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#152⤵PID:1528
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#153⤵PID:1856
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#154⤵PID:2836
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#155⤵PID:628
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#156⤵PID:4352
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#157⤵PID:4360
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#158⤵PID:4368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#159⤵PID:3212
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#160⤵PID:1916
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#161⤵PID:532
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#162⤵PID:4844
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#163⤵PID:4008
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#164⤵PID:1376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#165⤵PID:2176
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#166⤵PID:4524
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#167⤵PID:4584
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#168⤵PID:3800
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#169⤵PID:2252
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#170⤵PID:4208
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#171⤵PID:5136
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#172⤵PID:5148
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#173⤵PID:5160
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#174⤵PID:5176
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#175⤵PID:5188
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#176⤵PID:5200
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#177⤵PID:5212
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#178⤵PID:5232
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#179⤵PID:5244
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#180⤵PID:5256
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#181⤵PID:5272
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#182⤵PID:5284
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#183⤵PID:5300
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#184⤵PID:5312
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#185⤵PID:5324
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#186⤵PID:5340
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#187⤵PID:5364
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#188⤵PID:5380
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#189⤵PID:5392
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#190⤵PID:5408
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#191⤵PID:5428
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#192⤵PID:5448
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#193⤵PID:5464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#194⤵PID:5480
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#195⤵PID:5496
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#196⤵PID:5512
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#197⤵PID:5524
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#198⤵PID:5536
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#199⤵PID:5552
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1100⤵PID:5564
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1101⤵PID:5580
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1102⤵PID:5600
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1103⤵PID:5612
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1104⤵PID:5628
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1105⤵PID:5648
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1106⤵PID:5660
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1107⤵PID:5676
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1108⤵PID:5692
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1109⤵PID:5708
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1110⤵PID:5724
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1111⤵PID:5740
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1112⤵PID:5752
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1113⤵PID:5776
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1114⤵PID:5800
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1115⤵PID:5812
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1116⤵PID:5824
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1117⤵PID:5836
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1118⤵PID:5852
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1119⤵PID:5864
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1120⤵PID:5880
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1121⤵PID:5896
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2024-54-0x0000000000920000-0x0000000000943000-memory.dll,#1122⤵PID:5908
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-