Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll64.exe
|
loaddll64.exe "C:\Users\user\Desktop\2370f600000.dll"
|
 |
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2370f600000.dll,#1
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\2370f600000.dll",#1
|
|
|
|
C:\Windows\System32\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\2370f600000.dll",#1
|
 |
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
19033AC7000
|
unkown
|
page read and write
|
|
|
|
7FF59B901000
|
unkown image
|
page readonly
|
|
|
|
24BBCF75000
|
unkown
|
page read and write
|
|
|
|
7FF59E462000
|
unkown image
|
page readonly
|
|
|
|
2847764E000
|
unkown
|
page read and write
|
|
|
|
28477B80000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1880000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9692000
|
unkown image
|
page readonly
|
|
|
|
7FF59BA21000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3ACB000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
7FF59B8B1000
|
unkown image
|
page readonly
|
|
|
|
BBD337E000
|
stack
|
page read and write
|
|
|
|
7DF5F18A0000
|
unkown image
|
page readonly
|
|
|
|
7FF59BA1A000
|
unkown image
|
page readonly
|
|
|
|
7FF59E399000
|
unkown image
|
page readonly
|
|
|
|
19033A10000
|
unkown
|
page read and write
|
|
|
|
28477430000
|
unkown image
|
page readonly
|
|
|
|
28477708000
|
unkown
|
page read and write
|
|
|
|
24BBCF50000
|
heap default
|
page read and write
|
|
|
|
7FF59E491000
|
unkown image
|
page readonly
|
|
|
|
20D92540000
|
heap default
|
page read and write
|
|
|
|
7FF5E3B36000
|
unkown image
|
page readonly
|
|
|
|
7FF59DF77000
|
unkown image
|
page readonly
|
|
|
|
19033E10000
|
unkown image
|
page readonly
|
|
|
|
4A7147B000
|
unkown
|
page read and write
|
|
|
|
7FF5E3AA1000
|
unkown image
|
page readonly
|
|
|
|
7FF59E474000
|
unkown image
|
page readonly
|
|
|
|
24BBD11B000
|
heap private
|
page read and write
|
|
|
|
28477680000
|
unkown
|
page read and write
|
|
|
|
2847765D000
|
unkown
|
page read and write
|
|
|
|
28477420000
|
heap private
|
page read and write
|
|
|
|
EF24FFF000
|
stack
|
page read and write
|
|
|
|
7FF59BA31000
|
unkown image
|
page readonly
|
|
|
|
19033AD3000
|
unkown
|
page read and write
|
|
|
|
7FF59E3A3000
|
unkown image
|
page readonly
|
|
|
|
28477676000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B40000
|
unkown image
|
page readonly
|
|
|
|
7FF59BA09000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3C15000
|
unkown image
|
page readonly
|
|
|
|
19037100000
|
unkown
|
page read and write
|
|
|
|
7CC849B000
|
unkown
|
page read and write
|
|
|
|
7DF5AC100000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1880000
|
unkown image
|
page readonly
|
|
|
|
19033AD3000
|
unkown
|
page read and write
|
|
|
|
24BBCE40000
|
unkown image
|
page readonly
|
|
|
|
24BBCF5C000
|
heap default
|
page read and write
|
|
|
|
24BBD5E0000
|
unkown image
|
page readonly
|
|
|
|
24BBD115000
|
heap private
|
page read and write
|
|
|
|
28477624000
|
unkown
|
page read and write
|
|
|
|
28477E02000
|
unkown
|
page read and write
|
|
|
|
24BBCF7B000
|
unkown
|
page read and write
|
|
|
|
BBD307B000
|
stack
|
page read and write
|
|
|
|
24BC0280000
|
heap private
|
page read and write
|
|
|
|
7FF59E2E5000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3C11000
|
unkown image
|
page readonly
|
|
|
|
BBD2B2B000
|
unkown
|
page read and write
|
|
|
|
7FF57C3A0000
|
unkown image
|
page readonly
|
|
|
|
24BBCF78000
|
unkown
|
page read and write
|
|
|
|
7FF59BA02000
|
unkown image
|
page readonly
|
|
|
|
7FF59E3C7000
|
unkown image
|
page readonly
|
|
|
|
19033ADD000
|
unkown
|
page read and write
|
|
|
|
28477600000
|
unkown
|
page read and write
|
|
|
|
2847764C000
|
unkown
|
page read and write
|
|
|
|
7FF57C3B2000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC0F0000
|
unkown image
|
page readonly
|
|
|
|
19033CC5000
|
heap private
|
page read and write
|
|
|
|
24BBD090000
|
unkown
|
page read and write
|
|
|
|
7FF59E40A000
|
unkown image
|
page readonly
|
|
|
|
7FF59E315000
|
unkown image
|
page readonly
|
|
|
|
20D92553000
|
heap default
|
page read and write
|
|
|
|
7FF5E3A32000
|
unkown image
|
page readonly
|
|
|
|
19033ACA000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B2F000
|
unkown image
|
page readonly
|
|
|
|
24BBCF6B000
|
unkown
|
page read and write
|
|
|
|
7FF59E29F000
|
unkown image
|
page readonly
|
|
|
|
19034010000
|
unkown image
|
page readonly
|
|
|
|
28477654000
|
unkown
|
page read and write
|
|
|
|
7FF59B950000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9AD000
|
unkown image
|
page readonly
|
|
|
|
7DF5F18A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A96A2000
|
unkown image
|
page readonly
|
|
|
|
7DF5A96A0000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3C0000
|
unkown image
|
page readonly
|
|
|
|
19033ADD000
|
unkown
|
page read and write
|
|
|
|
24BBD460000
|
unkown image
|
page readonly
|
|
|
|
28477450000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3AA5000
|
unkown image
|
page readonly
|
|
|
|
7DF5A96A2000
|
unkown image
|
page readonly
|
|
|
|
7DF5A96B0000
|
unkown image
|
page readonly
|
|
|
|
BBD2E7E000
|
stack
|
page read and write
|
|
|
|
24BBCF74000
|
unkown
|
page read and write
|
|
|
|
24BBCE00000
|
unkown image
|
page readonly
|
|
|
|
7FF59E48A000
|
unkown image
|
page readonly
|
|
|
|
7FF59E2FC000
|
unkown image
|
page readonly
|
|
|
|
28477480000
|
heap default
|
page read and write
|
|
|
|
24BBCDF0000
|
unkown image
|
page read and write
|
|
|
|
7DF4EF750000
|
unkown image
|
page readonly
|
|
|
|
7FF59E3E3000
|
unkown image
|
page readonly
|
|
|
|
24BBCF74000
|
unkown
|
page read and write
|
|
|
|
20D92460000
|
unkown image
|
page readonly
|
|
|
|
28477702000
|
unkown
|
page read and write
|
|
|
|
24BC05D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C1A000
|
unkown image
|
page readonly
|
|
|
|
19033A80000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B33000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3B7E000
|
unkown image
|
page readonly
|
|
|
|
7FF59B97B000
|
unkown image
|
page readonly
|
|
|
|
190355B0000
|
unkown
|
page read and write
|
|
|
|
28477410000
|
unkown image
|
page read and write
|
|
|
|
7FF59E469000
|
unkown image
|
page readonly
|
|
|
|
28477622000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B75000
|
unkown image
|
page readonly
|
|
|
|
19033AB7000
|
heap default
|
page read and write
|
|
|
|
7FF59E3B3000
|
unkown image
|
page readonly
|
|
|
|
7FF47A270000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9690000
|
unkown image
|
page readonly
|
|
|
|
BBD3177000
|
stack
|
page read and write
|
|
|
|
7FF59E3B7000
|
unkown image
|
page readonly
|
|
|
|
190338D0000
|
unkown image
|
page readonly
|
|
|
|
7FF59E407000
|
unkown image
|
page readonly
|
|
|
|
19033AF6000
|
unkown
|
page read and write
|
|
|
|
7DF5A96B0000
|
unkown image
|
page readonly
|
|
|
|
24BBCF74000
|
unkown
|
page read and write
|
|
|
|
2847763C000
|
unkown
|
page read and write
|
|
|
|
7FF59BA31000
|
unkown image
|
page readonly
|
|
|
|
7FF59B943000
|
unkown image
|
page readonly
|
|
|
|
20D92440000
|
unkown image
|
page readonly
|
|
|
|
7FF59E39F000
|
unkown image
|
page readonly
|
|
|
|
7FF59E3EE000
|
unkown image
|
page readonly
|
|
|
|
24BBCF80000
|
unkown
|
page read and write
|
|
|
|
19036D00000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1892000
|
unkown image
|
page readonly
|
|
|
|
7FF59E491000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1882000
|
unkown image
|
page readonly
|
|
|
|
7FF59B8B5000
|
unkown image
|
page readonly
|
|
|
|
24BC06D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E38A2000
|
unkown image
|
page readonly
|
|
|
|
28477700000
|
unkown
|
page read and write
|
|
|
|
7DF5F1890000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC102000
|
unkown image
|
page readonly
|
|
|
|
7FF59B946000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3C21000
|
unkown image
|
page readonly
|
|
|
|
24BBD110000
|
heap private
|
page read and write
|
|
|
|
7FF59B953000
|
unkown image
|
page readonly
|
|
|
|
7FF59E40D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3B97000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC0F0000
|
unkown image
|
page readonly
|
|
|
|
19033ACE000
|
unkown
|
page read and write
|
|
|
|
7FF59BA25000
|
unkown image
|
page readonly
|
|
|
|
19033CCB000
|
heap private
|
page read and write
|
|
|
|
7FF59BA2A000
|
unkown image
|
page readonly
|
|
|
|
190338B0000
|
unkown image
|
page read and write
|
|
|
|
7DF5AC110000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3B2000
|
unkown image
|
page readonly
|
|
|
|
7FF59E3B0000
|
unkown image
|
page readonly
|
|
|
|
20D92420000
|
unkown image
|
page read and write
|
|
|
|
7DF5F1882000
|
unkown image
|
page readonly
|
|
|
|
7FF59E3BE000
|
unkown image
|
page readonly
|
|
|
|
7DF4A7560000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3C21000
|
unkown image
|
page readonly
|
|
|
|
28477460000
|
unkown image
|
page readonly
|
|
|
|
7FF59B8DB000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9AA000
|
unkown image
|
page readonly
|
|
|
|
24BBCE10000
|
unkown image
|
page readonly
|
|
|
|
7DF4A9FC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3BF9000
|
unkown image
|
page readonly
|
|
|
|
7DF5A96A0000
|
unkown image
|
page readonly
|
|
|
|
7FF59E387000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3C04000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
7FF59E25D000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9A7000
|
unkown image
|
page readonly
|
|
|
|
7FF59E481000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3B9A000
|
unkown image
|
page readonly
|
|
|
|
7FF59B93F000
|
unkown image
|
page readonly
|
|
|
|
7FF59E27B000
|
unkown image
|
page readonly
|
|
|
|
4A7157E000
|
stack
|
page read and write
|
|
|
|
19033C30000
|
heap private
|
page read and write
|
|
|
|
2847766F000
|
unkown
|
page read and write
|
|
|
|
7FF59B98E000
|
unkown image
|
page readonly
|
|
|
|
19033AD9000
|
unkown
|
page read and write
|
|
|
|
190338D0000
|
unkown image
|
page readonly
|
|
|
|
7FF59E47A000
|
unkown image
|
page readonly
|
|
|
|
24BBCF6F000
|
unkown
|
page read and write
|
|
|
|
7FF59E115000
|
unkown image
|
page readonly
|
|
|
|
7FF59B847000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3C0A000
|
unkown image
|
page readonly
|
|
|
|
19033CC0000
|
heap private
|
page read and write
|
|
|
|
7FF59E311000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3A0000
|
unkown image
|
page readonly
|
|
|
|
24BBCF6B000
|
unkown
|
page read and write
|
|
|
|
24BBCF7B000
|
unkown
|
page read and write
|
|
|
|
7FF57C3A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3AC1000
|
unkown image
|
page readonly
|
|
|
|
28477648000
|
unkown
|
page read and write
|
|
|
|
7FF59E216000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3A37000
|
unkown image
|
page readonly
|
|
|
|
24BBCF68000
|
unkown
|
page read and write
|
|
|
|
20D92470000
|
unkown image
|
page readonly
|
|
|
|
7FF59B985000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1890000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3B0000
|
unkown image
|
page readonly
|
|
|
|
19033C33000
|
heap private
|
page read and write
|
|
|
|
24BC0150000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3B43000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC100000
|
unkown image
|
page readonly
|
|
|
|
24BBD050000
|
unkown
|
page read and write
|
|
|
|
7DF5A9692000
|
unkown image
|
page readonly
|
|
|
|
7FF59B842000
|
unkown image
|
page readonly
|
|
|
|
19033ACA000
|
unkown
|
page read and write
|
|
|
|
7FF59E3DB000
|
unkown image
|
page readonly
|
|
|
|
24BBD0C0000
|
unkown
|
page read and write
|
|
|
|
7DF5F1892000
|
unkown image
|
page readonly
|
|
|
|
7FF59DF71000
|
unkown image
|
page readonly
|
|
|
|
EF24EFE000
|
stack
|
page read and write
|
|
|
|
19033A50000
|
unkown
|
page read and write
|
|
|
|
24BBEA00000
|
unkown
|
page read and write
|
|
|
|
BBD2BAD000
|
stack
|
page read and write
|
|
|
|
190338C0000
|
unkown image
|
page readonly
|
|
|
|
24BBCE10000
|
unkown image
|
page readonly
|
|
|
|
7FF59E39D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3AF1000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9690000
|
unkown image
|
page readonly
|
|
|
|
24BBD080000
|
unkown image
|
page readonly
|
|
|
|
7FF59E241000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC110000
|
unkown image
|
page readonly
|
|
|
|
19033AEE000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B9D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3BF2000
|
unkown image
|
page readonly
|
|
|
|
19033ACF000
|
unkown
|
page read and write
|
|
|
|
24BBCF74000
|
unkown
|
page read and write
|
|
|
|
28477800000
|
unkown image
|
page readonly
|
|
|
|
24BC0283000
|
heap private
|
page read and write
|
|
|
|
24BBCF30000
|
unkown
|
page read and write
|
|
|
|
24BBD0B0000
|
unkown image
|
page readonly
|
|
|
|
7FF57C3A2000
|
unkown image
|
page readonly
|
|
|
|
EF24BFD000
|
unkown
|
page read and write
|
|
|
|
24BBCF71000
|
unkown
|
page read and write
|
|
|
|
7DF5AC102000
|
unkown image
|
page readonly
|
|
|
|
4A714FE000
|
stack
|
page read and write
|
|
|
|
19033AE2000
|
unkown
|
page read and write
|
|
|
|
190339F0000
|
unkown
|
page read and write
|
|
|
|
7DF5AC0F2000
|
unkown image
|
page readonly
|
|
|
|
7FF59B8D1000
|
unkown image
|
page readonly
|
|
|
|
7FF59BA14000
|
unkown image
|
page readonly
|
|
|
|
19033AB0000
|
heap default
|
page read and write
|
|
|
|
190338F0000
|
unkown image
|
page readonly
|
|
|
|
24BBD260000
|
unkown image
|
page readonly
|
|
|
|
28477580000
|
unkown
|
page read and write
|
|
|
|
7CC859E000
|
stack
|
page read and write
|
|
|
|
19033A70000
|
unkown image
|
page readonly
|
|
|
|
7FF59E2EB000
|
unkown image
|
page readonly
|
|
|
|
28477613000
|
unkown
|
page read and write
|
|
|
|
20D9254D000
|
heap default
|
page read and write
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
28477560000
|
unkown image
|
page readonly
|
|
|
|
20D92440000
|
unkown image
|
page readonly
|
|
|
|
7CC851F000
|
stack
|
page read and write
|
|
|
|
28477430000
|
unkown image
|
page readonly
|
|
|
|
19037200000
|
unkown
|
page read and write
|
|
|
|
7DF5AC0F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3B6B000
|
unkown image
|
page readonly
|
|
|
|
7FF59B6B2000
|
unkown image
|
page readonly
|
|
|
|
28477713000
|
unkown
|
page read and write
|
|
|
|
2847765D000
|
unkown
|
page read and write
|
|
|
|
20D92490000
|
unkown
|
page read and write
|
|
|
|
24BBCE30000
|
unkown image
|
page readonly
|
|
|
|
7CC887E000
|
stack
|
page read and write
|
|
|
|
BBD327E000
|
stack
|
page read and write
|
|
|
|
7FF59E260000
|
unkown image
|
page readonly
|
|
|
|
7FF59DCA6000
|
unkown image
|
page readonly
|
|
|
|
19034190000
|
unkown image
|
page readonly
|
|
|
|
19033A40000
|
unkown image
|
page readonly
|
|
|
|
28477A00000
|
unkown image
|
page readonly
|
|
|
|
19033900000
|
unkown image
|
page readonly
|
|
There are 268 hidden memdumps, click here to show them.