Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll64.exe
|
loaddll64.exe "C:\Users\user\Desktop\28b452d0000.dll"
|
 |
|
|
C:\Windows\System32\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\28b452d0000.dll",#1
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\28b452d0000.dll,#1
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\28b452d0000.dll",#1
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF53EFEE000
|
unkown image
|
page readonly
|
|
|
|
23B31870000
|
unkown image
|
page read and write
|
|
|
|
7FF53EF15000
|
unkown image
|
page readonly
|
|
|
|
19ED0F90000
|
unkown image
|
page readonly
|
|
|
|
23B31880000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB892000
|
unkown image
|
page readonly
|
|
|
|
7FF53F069000
|
unkown image
|
page readonly
|
|
|
|
7FF53F062000
|
unkown image
|
page readonly
|
|
|
|
6EE0FE000
|
stack
|
page read and write
|
|
|
|
7FF53F085000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1C31000
|
unkown image
|
page readonly
|
|
|
|
279D7C00000
|
unkown image
|
page readonly
|
|
|
|
7FF53EFE5000
|
unkown image
|
page readonly
|
|
|
|
23B34BB3000
|
heap private
|
page read and write
|
|
|
|
7FF4FF2CA000
|
unkown image
|
page readonly
|
|
|
|
23B33410000
|
unkown
|
page read and write
|
|
|
|
7FF5AB882000
|
unkown image
|
page readonly
|
|
|
|
7DF5AFA00000
|
unkown image
|
page readonly
|
|
|
|
279D7B02000
|
unkown
|
page read and write
|
|
|
|
7DF54CD00000
|
unkown image
|
page readonly
|
|
|
|
7FF53F08A000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF200000
|
unkown image
|
page readonly
|
|
|
|
279D7A5B000
|
unkown
|
page read and write
|
|
|
|
7FF4FEDC1000
|
unkown image
|
page readonly
|
|
|
|
279D7A66000
|
unkown
|
page read and write
|
|
|
|
19ED09E9000
|
unkown
|
page read and write
|
|
|
|
279D8202000
|
unkown
|
page read and write
|
|
|
|
CC7B9FC000
|
stack
|
page read and write
|
|
|
|
23B3193E000
|
unkown
|
page read and write
|
|
|
|
7FF53EF9F000
|
unkown image
|
page readonly
|
|
|
|
808B87E000
|
stack
|
page read and write
|
|
|
|
19ED09ED000
|
unkown
|
page read and write
|
|
|
|
19ED08F0000
|
unkown image
|
page readonly
|
|
|
|
6EDD9B000
|
unkown
|
page read and write
|
|
|
|
29B302E0000
|
unkown image
|
page readonly
|
|
|
|
CC7B58C000
|
unkown
|
page read and write
|
|
|
|
7FF4FF25A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D91000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
23B3192D000
|
unkown
|
page read and write
|
|
|
|
23B31AF0000
|
heap private
|
page read and write
|
|
|
|
19ED09A0000
|
unkown image
|
page readonly
|
|
|
|
279D7850000
|
heap default
|
page read and write
|
|
|
|
19ED0D80000
|
heap private
|
page read and write
|
|
|
|
CC7BE7E000
|
stack
|
page read and write
|
|
|
|
23B34BC0000
|
unkown image
|
page readonly
|
|
|
|
808B58B000
|
unkown
|
page read and write
|
|
|
|
7FF4FF2D1000
|
unkown image
|
page readonly
|
|
|
|
29B3038E000
|
heap default
|
page read and write
|
|
|
|
7FF5A1D81000
|
unkown image
|
page readonly
|
|
|
|
23B31923000
|
unkown
|
page read and write
|
|
|
|
7FF53F074000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
23B3191E000
|
unkown
|
page read and write
|
|
|
|
7DF5AF9F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB892000
|
unkown image
|
page readonly
|
|
|
|
CC7BD7F000
|
stack
|
page read and write
|
|
|
|
7FF4FF1D7000
|
unkown image
|
page readonly
|
|
|
|
7DF5AF9F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB890000
|
unkown image
|
page readonly
|
|
|
|
279D7950000
|
unkown
|
page read and write
|
|
|
|
19ED2530000
|
unkown
|
page read and write
|
|
|
|
CC7B87E000
|
stack
|
page read and write
|
|
|
|
7FF53EEA2000
|
unkown image
|
page readonly
|
|
|
|
CC7BA7E000
|
stack
|
page read and write
|
|
|
|
7DF50CF50000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D62000
|
unkown image
|
page readonly
|
|
|
|
7FF53F07A000
|
unkown image
|
page readonly
|
|
|
|
7DF5AF9F0000
|
unkown image
|
page readonly
|
|
|
|
7FF4A9750000
|
unkown image
|
page readonly
|
|
|
|
7DF50CF40000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1CB3000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D0D000
|
unkown image
|
page readonly
|
|
|
|
7DF5AFA10000
|
unkown image
|
page readonly
|
|
|
|
279D7F80000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1A12000
|
unkown image
|
page readonly
|
|
|
|
279D7A00000
|
unkown
|
page read and write
|
|
|
|
7DF50CF60000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9B9000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF2B2000
|
unkown image
|
page readonly
|
|
|
|
19ED09B0000
|
unkown
|
page read and write
|
|
|
|
19ED3D63000
|
heap private
|
page read and write
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
23B34C80000
|
unkown
|
page read and write
|
|
|
|
23B34B80000
|
unkown
|
page read and write
|
|
|
|
19ED0900000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D74000
|
unkown image
|
page readonly
|
|
|
|
23B3192D000
|
unkown
|
page read and write
|
|
|
|
7FF4FF2DA000
|
unkown image
|
page readonly
|
|
|
|
7DF54CD10000
|
unkown image
|
page readonly
|
|
|
|
19ED09F2000
|
unkown
|
page read and write
|
|
|
|
7DF50CF42000
|
unkown image
|
page readonly
|
|
|
|
CBE8EFF000
|
stack
|
page read and write
|
|
|
|
23B31929000
|
unkown
|
page read and write
|
|
|
|
7DF54CCF0000
|
unkown image
|
page readonly
|
|
|
|
7FF53EF11000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF14C000
|
unkown image
|
page readonly
|
|
|
|
7DFBC8215000
|
unkown image
|
page readonly
|
|
|
|
23B34B70000
|
unkown image
|
page readonly
|
|
|
|
CBE8B9C000
|
unkown
|
page read and write
|
|
|
|
23B31AD0000
|
unkown
|
page read and write
|
|
|
|
23B31932000
|
unkown
|
page read and write
|
|
|
|
19ED09F5000
|
unkown
|
page read and write
|
|
|
|
7FF53F091000
|
unkown image
|
page readonly
|
|
|
|
19ED41B0000
|
unkown
|
page read and write
|
|
|
|
7DF50CF60000
|
unkown image
|
page readonly
|
|
|
|
29B302F0000
|
unkown image
|
page readonly
|
|
|
|
279D7820000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF2C4000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB890000
|
unkown image
|
page readonly
|
|
|
|
CC7BB7B000
|
stack
|
page read and write
|
|
|
|
7DF54CD02000
|
unkown image
|
page readonly
|
|
|
|
29B302C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5AFA02000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D69000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF1ED000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1CA3000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF091000
|
unkown image
|
page readonly
|
|
|
|
279D7A77000
|
unkown
|
page read and write
|
|
|
|
23B35100000
|
unkown
|
page read and write
|
|
|
|
CC7BC77000
|
stack
|
page read and write
|
|
|
|
7DF50CF52000
|
unkown image
|
page readonly
|
|
|
|
7DF50CF42000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1CEE000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF161000
|
unkown image
|
page readonly
|
|
|
|
279D7E00000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1C61000
|
unkown image
|
page readonly
|
|
|
|
7FF53EFA3000
|
unkown image
|
page readonly
|
|
|
|
23B31C50000
|
unkown image
|
page readonly
|
|
|
|
23B31E50000
|
unkown image
|
page readonly
|
|
|
|
7DF54CD10000
|
unkown image
|
page readonly
|
|
|
|
7FF53F091000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB880000
|
unkown image
|
page readonly
|
|
|
|
19ED0D90000
|
unkown image
|
page readonly
|
|
|
|
279D77E0000
|
unkown image
|
page read and write
|
|
|
|
7FF4FF0B0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF0AD000
|
unkown image
|
page readonly
|
|
|
|
23B31923000
|
unkown
|
page read and write
|
|
|
|
7DF54CCF0000
|
unkown image
|
page readonly
|
|
|
|
23B318B0000
|
unkown image
|
page readonly
|
|
|
|
7DF54CD02000
|
unkown image
|
page readonly
|
|
|
|
279D7A61000
|
unkown
|
page read and write
|
|
|
|
19ED1110000
|
unkown image
|
page readonly
|
|
|
|
23B31900000
|
heap default
|
page read and write
|
|
|
|
279D7800000
|
unkown image
|
page readonly
|
|
|
|
23B31E60000
|
unkown image
|
page readonly
|
|
|
|
279D7A85000
|
unkown
|
page read and write
|
|
|
|
7FF53ED12000
|
unkown image
|
page readonly
|
|
|
|
23B3191A000
|
unkown
|
page read and write
|
|
|
|
7FF53EFB0000
|
unkown image
|
page readonly
|
|
|
|
23B31890000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF23E000
|
unkown image
|
page readonly
|
|
|
|
CC7B8FE000
|
stack
|
page read and write
|
|
|
|
6EE07E000
|
stack
|
page read and write
|
|
|
|
19ED0930000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF2B9000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D0A000
|
unkown image
|
page readonly
|
|
|
|
19ED3D60000
|
heap private
|
page read and write
|
|
|
|
7FF53EFDB000
|
unkown image
|
page readonly
|
|
|
|
279D7930000
|
unkown image
|
page readonly
|
|
|
|
808B8FD000
|
stack
|
page read and write
|
|
|
|
7DF50CF52000
|
unkown image
|
page readonly
|
|
|
|
19ED0CF0000
|
unkown
|
page read and write
|
|
|
|
7DF5AF9F2000
|
unkown image
|
page readonly
|
|
|
|
29B302C0000
|
unkown image
|
page readonly
|
|
|
|
19ED0900000
|
unkown image
|
page readonly
|
|
|
|
19ED09FC000
|
unkown
|
page read and write
|
|
|
|
23B31AFB000
|
heap private
|
page read and write
|
|
|
|
279D7A29000
|
unkown
|
page read and write
|
|
|
|
7FF4FF1EF000
|
unkown image
|
page readonly
|
|
|
|
29B30310000
|
unkown
|
page read and write
|
|
|
|
7FF4FF2E1000
|
unkown image
|
page readonly
|
|
|
|
7FF4FEDC7000
|
unkown image
|
page readonly
|
|
|
|
23B31908000
|
heap default
|
page read and write
|
|
|
|
7FF5A1BA7000
|
unkown image
|
page readonly
|
|
|
|
23B318C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB882000
|
unkown image
|
page readonly
|
|
|
|
19ED09F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A1D7A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1C3B000
|
unkown image
|
page readonly
|
|
|
|
7DF4AD8C0000
|
unkown image
|
page readonly
|
|
|
|
19ED09F5000
|
unkown
|
page read and write
|
|
|
|
7FF4FF25D000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF1F3000
|
unkown image
|
page readonly
|
|
|
|
7DF44ABC0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF066000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D8A000
|
unkown image
|
page readonly
|
|
|
|
19ED3C80000
|
unkown image
|
page readonly
|
|
|
|
19ED0D8B000
|
heap private
|
page read and write
|
|
|
|
29B30380000
|
heap default
|
page read and write
|
|
|
|
7DF5AFA02000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF233000
|
unkown image
|
page readonly
|
|
|
|
23B31890000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1BA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB8A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB8A0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF257000
|
unkown image
|
page readonly
|
|
|
|
279D7800000
|
unkown image
|
page readonly
|
|
|
|
19ED09D0000
|
heap default
|
page read and write
|
|
|
|
19ED09ED000
|
unkown
|
page read and write
|
|
|
|
7FF53F081000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF0CB000
|
unkown image
|
page readonly
|
|
|
|
19ED09F6000
|
unkown
|
page read and write
|
|
|
|
7FF53F007000
|
unkown image
|
page readonly
|
|
|
|
7DF40AE10000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1CB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1C11000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF203000
|
unkown image
|
page readonly
|
|
|
|
19ED08E0000
|
unkown image
|
page read and write
|
|
|
|
279D7B08000
|
unkown
|
page read and write
|
|
|
|
7FF5A1CA6000
|
unkown image
|
page readonly
|
|
|
|
7FF4FEF65000
|
unkown image
|
page readonly
|
|
|
|
19ED0CE0000
|
unkown image
|
page readonly
|
|
|
|
7FF53EF3B000
|
unkown image
|
page readonly
|
|
|
|
7DF50CF50000
|
unkown image
|
page readonly
|
|
|
|
279D7830000
|
unkown image
|
page readonly
|
|
|
|
279D7A3C000
|
unkown
|
page read and write
|
|
|
|
7FF4FF13B000
|
unkown image
|
page readonly
|
|
|
|
19ED09F9000
|
unkown
|
page read and write
|
|
|
|
7FF53EF31000
|
unkown image
|
page readonly
|
|
|
|
19ED0D85000
|
heap private
|
page read and write
|
|
|
|
23B31FE0000
|
unkown image
|
page readonly
|
|
|
|
23B31946000
|
unkown
|
page read and write
|
|
|
|
7DF50CF40000
|
unkown image
|
page readonly
|
|
|
|
29B30394000
|
heap default
|
page read and write
|
|
|
|
279D77F0000
|
heap private
|
page read and write
|
|
|
|
7FF4FF20E000
|
unkown image
|
page readonly
|
|
|
|
7FF53EEA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1CE5000
|
unkown image
|
page readonly
|
|
|
|
19ED0920000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF207000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D85000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF22B000
|
unkown image
|
page readonly
|
|
|
|
CBE8FFF000
|
stack
|
page read and write
|
|
|
|
19ED0970000
|
unkown
|
page read and write
|
|
|
|
279D7B13000
|
unkown
|
page read and write
|
|
|
|
7FF4FF135000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
7FF53F00A000
|
unkown image
|
page readonly
|
|
|
|
7DF5AFA00000
|
unkown image
|
page readonly
|
|
|
|
23B31AF5000
|
heap private
|
page read and write
|
|
|
|
19ED0A15000
|
unkown
|
page read and write
|
|
|
|
23B34BB0000
|
heap private
|
page read and write
|
|
|
|
7FF5A1D07000
|
unkown image
|
page readonly
|
|
|
|
19ED09F5000
|
unkown
|
page read and write
|
|
|
|
7FF53EF61000
|
unkown image
|
page readonly
|
|
|
|
19ED09F5000
|
unkown
|
page read and write
|
|
|
|
19ED0950000
|
unkown
|
page read and write
|
|
|
|
7FF53F00D000
|
unkown image
|
page readonly
|
|
|
|
279D7A5F000
|
unkown
|
page read and write
|
|
|
|
29B302A0000
|
unkown image
|
page read and write
|
|
|
|
7DF54CCF2000
|
unkown image
|
page readonly
|
|
|
|
23B33400000
|
unkown
|
page read and write
|
|
|
|
7FF53EFA6000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF2E1000
|
unkown image
|
page readonly
|
|
|
|
23B3191F000
|
unkown
|
page read and write
|
|
|
|
19ED09D7000
|
heap default
|
page read and write
|
|
|
|
279D7A13000
|
unkown
|
page read and write
|
|
|
|
7FF4FF1E9000
|
unkown image
|
page readonly
|
|
|
|
7DF54CCF2000
|
unkown image
|
page readonly
|
|
|
|
19ED09FC000
|
unkown
|
page read and write
|
|
|
|
279D7A54000
|
unkown
|
page read and write
|
|
|
|
7FF5A1C15000
|
unkown image
|
page readonly
|
|
|
|
19ED0A01000
|
unkown
|
page read and write
|
|
|
|
7FF53EFB3000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1C9F000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1CDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB880000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1D91000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF165000
|
unkown image
|
page readonly
|
|
|
|
19ED40B0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF217000
|
unkown image
|
page readonly
|
|
|
|
23B318E0000
|
unkown
|
page read and write
|
|
|
|
23B3191A000
|
unkown
|
page read and write
|
|
|
|
7FF4FF0EF000
|
unkown image
|
page readonly
|
|
|
|
7DF5AFA10000
|
unkown image
|
page readonly
|
|
|
|
7DF54CD00000
|
unkown image
|
page readonly
|
|
|
|
279D7B00000
|
unkown
|
page read and write
|
|
There are 268 hidden memdumps, click here to show them.