Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\d780000.dll",#1
|
 |
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\d780000.dll",#1
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\d780000.dll,#1
|
|
|
|
C:\Windows\System32\loaddll64.exe
|
loaddll64.exe "C:\Users\user\Desktop\d780000.dll"
|
 |
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
12664A86000
|
unkown
|
page read and write
|
|
|
|
7FF52AEF2000
|
unkown image
|
page readonly
|
|
|
|
6D0DEB000
|
unkown
|
page read and write
|
|
|
|
2550F09B000
|
heap private
|
page read and write
|
|
|
|
170C4600000
|
heap default
|
page read and write
|
|
|
|
25510980000
|
unkown
|
page read and write
|
|
|
|
7DF5FA030000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC39A000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA012000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC30E000
|
unkown image
|
page readonly
|
|
|
|
20E998FD000
|
unkown
|
page read and write
|
|
|
|
7DF5FA010000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE2F000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA020000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC4C9000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA160000
|
unkown image
|
page readonly
|
|
|
|
7FF52AEF9000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC305000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC413000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC467000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE29000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC4E5000
|
unkown image
|
page readonly
|
|
|
|
7FF579AA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC391000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC1C2000
|
unkown image
|
page readonly
|
|
|
|
7DF538B90000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE40000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA030000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC3A1000
|
unkown image
|
page readonly
|
|
|
|
7FF579A90000
|
unkown image
|
page readonly
|
|
|
|
12664A8A000
|
unkown
|
page read and write
|
|
|
|
12664B00000
|
unkown
|
page read and write
|
|
|
|
2550ED60000
|
unkown image
|
page readonly
|
|
|
|
255121E0000
|
heap private
|
page read and write
|
|
|
|
12665080000
|
unkown
|
page read and write
|
|
|
|
7FF52AD0B000
|
unkown image
|
page readonly
|
|
|
|
170C4540000
|
unkown image
|
page readonly
|
|
|
|
20E99E90000
|
unkown image
|
page readonly
|
|
|
|
7FF52ADA5000
|
unkown image
|
page readonly
|
|
|
|
6D157E000
|
stack
|
page read and write
|
|
|
|
2550F095000
|
heap private
|
page read and write
|
|
|
|
2550EE1B000
|
heap default
|
page read and write
|
|
|
|
20E998DB000
|
heap default
|
page read and write
|
|
|
|
7FF579AB0000
|
unkown image
|
page readonly
|
|
|
|
20E998F9000
|
unkown
|
page read and write
|
|
|
|
20E99680000
|
unkown image
|
page read and write
|
|
|
|
7FF5AC3FF000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC25B000
|
unkown image
|
page readonly
|
|
|
|
2550EE34000
|
unkown
|
page read and write
|
|
|
|
7FF5EC389000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE97000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC2D0000
|
unkown image
|
page readonly
|
|
|
|
6D12FB000
|
stack
|
page read and write
|
|
|
|
20E9984B000
|
heap private
|
page read and write
|
|
|
|
7FF5EC251000
|
unkown image
|
page readonly
|
|
|
|
126648C0000
|
heap private
|
page read and write
|
|
|
|
7FF5AC4F1000
|
unkown image
|
page readonly
|
|
|
|
2550EE43000
|
unkown
|
page read and write
|
|
|
|
7DF538B80000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA012000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC4DA000
|
unkown image
|
page readonly
|
|
|
|
20E99902000
|
unkown
|
page read and write
|
|
|
|
170C4590000
|
unkown
|
page read and write
|
|
|
|
7FF52AE9A000
|
unkown image
|
page readonly
|
|
|
|
20E9990E000
|
unkown
|
page read and write
|
|
|
|
12664A00000
|
unkown
|
page read and write
|
|
|
|
25512630000
|
unkown
|
page read and write
|
|
|
|
7FF5EC1C7000
|
unkown image
|
page readonly
|
|
|
|
12664A60000
|
unkown
|
page read and write
|
|
|
|
2550EDB0000
|
unkown
|
page read and write
|
|
|
|
12664A47000
|
unkown
|
page read and write
|
|
|
|
2550ED40000
|
unkown image
|
page read and write
|
|
|
|
20E996A0000
|
unkown image
|
page readonly
|
|
|
|
20E996C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC32A000
|
unkown image
|
page readonly
|
|
|
|
12664900000
|
unkown image
|
page readonly
|
|
|
|
255121E3000
|
heap private
|
page read and write
|
|
|
|
7FF5EC2BF000
|
unkown image
|
page readonly
|
|
|
|
12664A59000
|
unkown
|
page read and write
|
|
|
|
6D10FE000
|
stack
|
page read and write
|
|
|
|
7DF5FA022000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA152000
|
unkown image
|
page readonly
|
|
|
|
12664E10000
|
unkown image
|
page readonly
|
|
|
|
20E99690000
|
unkown image
|
page readonly
|
|
|
|
7DF538B90000
|
unkown image
|
page readonly
|
|
|
|
20E998F3000
|
unkown
|
page read and write
|
|
|
|
7FF52AE47000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC410000
|
unkown image
|
page readonly
|
|
|
|
12665202000
|
unkown
|
page read and write
|
|
|
|
7FF5EC2FB000
|
unkown image
|
page readonly
|
|
|
|
20E998F3000
|
unkown
|
page read and write
|
|
|
|
170C460D000
|
heap default
|
page read and write
|
|
|
|
7FF52AF11000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC43B000
|
unkown image
|
page readonly
|
|
|
|
7DF538B92000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE73000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC281000
|
unkown image
|
page readonly
|
|
|
|
7DF538B80000
|
unkown image
|
page readonly
|
|
|
|
20E998EF000
|
unkown
|
page read and write
|
|
|
|
7DF538BA0000
|
unkown image
|
page readonly
|
|
|
|
126648D0000
|
unkown image
|
page readonly
|
|
|
|
170C4520000
|
unkown image
|
page read and write
|
|
|
|
2550ED50000
|
unkown image
|
page readonly
|
|
|
|
2550F3E0000
|
unkown image
|
page readonly
|
|
|
|
12664A3C000
|
unkown
|
page read and write
|
|
|
|
7FF579A92000
|
unkown image
|
page readonly
|
|
|
|
2550EE10000
|
heap default
|
page read and write
|
|
|
|
2550EE00000
|
unkown image
|
page readonly
|
|
|
|
2550F1E0000
|
unkown image
|
page readonly
|
|
|
|
20E998EA000
|
unkown
|
page read and write
|
|
|
|
126648D0000
|
unkown image
|
page readonly
|
|
|
|
7DF538B92000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA162000
|
unkown image
|
page readonly
|
|
|
|
12664A6F000
|
unkown
|
page read and write
|
|
|
|
20E998EA000
|
unkown
|
page read and write
|
|
|
|
2550F090000
|
heap private
|
page read and write
|
|
|
|
7FF5AC4D4000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC3A5000
|
unkown image
|
page readonly
|
|
|
|
2550ED90000
|
unkown image
|
page readonly
|
|
|
|
2550EFE0000
|
unkown
|
page read and write
|
|
|
|
12664920000
|
heap default
|
page read and write
|
|
|
|
2550EE3A000
|
unkown
|
page read and write
|
|
|
|
7FF52AE9D000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC172000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC4EA000
|
unkown image
|
page readonly
|
|
|
|
7FF52ABA5000
|
unkown image
|
page readonly
|
|
|
|
F2AD3FB000
|
unkown
|
page read and write
|
|
|
|
7FF5EC3B1000
|
unkown image
|
page readonly
|
|
|
|
20E998C0000
|
heap private
|
page read and write
|
|
|
|
170C4540000
|
unkown image
|
page readonly
|
|
|
|
7FF52AD2F000
|
unkown image
|
page readonly
|
|
|
|
126648B0000
|
unkown image
|
page read and write
|
|
|
|
2550EE2F000
|
unkown
|
page read and write
|
|
|
|
7FF5EC032000
|
unkown image
|
page readonly
|
|
|
|
7FF52ACA6000
|
unkown image
|
page readonly
|
|
|
|
7DF436A50000
|
unkown image
|
page readonly
|
|
|
|
12664A13000
|
unkown
|
page read and write
|
|
|
|
20E997C0000
|
unkown
|
page read and write
|
|
|
|
7DF5BA170000
|
unkown image
|
page readonly
|
|
|
|
F2AD6FF000
|
stack
|
page read and write
|
|
|
|
3120D8D000
|
unkown
|
page read and write
|
|
|
|
7FF5AC3C1000
|
unkown image
|
page readonly
|
|
|
|
20E99845000
|
heap private
|
page read and write
|
|
|
|
12664A5D000
|
unkown
|
page read and write
|
|
|
|
7FF52ACD1000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA162000
|
unkown image
|
page readonly
|
|
|
|
7FF579AB0000
|
unkown image
|
page readonly
|
|
|
|
6D107D000
|
stack
|
page read and write
|
|
|
|
7FF52AE17000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA152000
|
unkown image
|
page readonly
|
|
|
|
7FF52AA01000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC406000
|
unkown image
|
page readonly
|
|
|
|
7DF538B82000
|
unkown image
|
page readonly
|
|
|
|
20E998FD000
|
unkown
|
page read and write
|
|
|
|
12664F90000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC4C2000
|
unkown image
|
page readonly
|
|
|
|
20E996D0000
|
unkown image
|
page readonly
|
|
|
|
12664A5B000
|
unkown
|
page read and write
|
|
|
|
7FF5AC39B000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA010000
|
unkown image
|
page readonly
|
|
|
|
7DF4B8020000
|
unkown image
|
page readonly
|
|
|
|
25512530000
|
unkown
|
page read and write
|
|
|
|
20E99820000
|
unkown
|
page read and write
|
|
|
|
7FF5EC2D3000
|
unkown image
|
page readonly
|
|
|
|
31210FF000
|
stack
|
page read and write
|
|
|
|
12664A65000
|
unkown
|
page read and write
|
|
|
|
12664B08000
|
unkown
|
page read and write
|
|
|
|
7DF5BA160000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC327000
|
unkown image
|
page readonly
|
|
|
|
20E9CAC0000
|
unkown
|
page read and write
|
|
|
|
7DF4F7EE0000
|
unkown image
|
page readonly
|
|
|
|
20E9CA00000
|
unkown image
|
page readonly
|
|
|
|
2550EE2B000
|
unkown
|
page read and write
|
|
|
|
7FF5AC445000
|
unkown image
|
page readonly
|
|
|
|
7DF538BA0000
|
unkown image
|
page readonly
|
|
|
|
7FF52ACED000
|
unkown image
|
page readonly
|
|
|
|
2550EE3E000
|
unkown
|
page read and write
|
|
|
|
7FF5EC2C3000
|
unkown image
|
page readonly
|
|
|
|
20E99D10000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
20E99B10000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA170000
|
unkown image
|
page readonly
|
|
|
|
20E99850000
|
unkown image
|
page readonly
|
|
|
|
12664A2A000
|
unkown
|
page read and write
|
|
|
|
7FF579A90000
|
unkown image
|
page readonly
|
|
|
|
7FF52AD7B000
|
unkown image
|
page readonly
|
|
|
|
170C4560000
|
unkown image
|
page readonly
|
|
|
|
45EF67E000
|
stack
|
page read and write
|
|
|
|
20E99916000
|
unkown
|
page read and write
|
|
|
|
7FF579AA0000
|
unkown image
|
page readonly
|
|
|
|
7FF579AA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC235000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC46D000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA022000
|
unkown image
|
page readonly
|
|
|
|
7FF52ADA1000
|
unkown image
|
page readonly
|
|
|
|
12664E00000
|
unkown image
|
page readonly
|
|
|
|
31211FF000
|
stack
|
page read and write
|
|
|
|
7FF5EC382000
|
unkown image
|
page readonly
|
|
|
|
20E9B2B0000
|
unkown
|
page read and write
|
|
|
|
7FF5AC4E1000
|
unkown image
|
page readonly
|
|
|
|
20E998C3000
|
heap private
|
page read and write
|
|
|
|
7FF5AC403000
|
unkown image
|
page readonly
|
|
|
|
7FF579AA2000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE2D000
|
unkown image
|
page readonly
|
|
|
|
7DF538B82000
|
unkown image
|
page readonly
|
|
|
|
7FF52AF21000
|
unkown image
|
page readonly
|
|
|
|
20E9CF00000
|
unkown
|
page read and write
|
|
|
|
20E998E7000
|
unkown
|
page read and write
|
|
|
|
7FF52AE43000
|
unkown image
|
page readonly
|
|
|
|
12664A6F000
|
unkown
|
page read and write
|
|
|
|
7FF477960000
|
unkown image
|
page readonly
|
|
|
|
7FF579A92000
|
unkown image
|
page readonly
|
|
|
|
6D167E000
|
stack
|
page read and write
|
|
|
|
20E998EE000
|
unkown
|
page read and write
|
|
|
|
45EF6FE000
|
stack
|
page read and write
|
|
|
|
7FF5AC4F1000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC2C6000
|
unkown image
|
page readonly
|
|
|
|
2550EDD0000
|
unkown
|
page read and write
|
|
|
|
7FF5EC3AA000
|
unkown image
|
page readonly
|
|
|
|
126648F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC307000
|
unkown image
|
page readonly
|
|
|
|
12664C00000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA020000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE6B000
|
unkown image
|
page readonly
|
|
|
|
7FF52AF0A000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC394000
|
unkown image
|
page readonly
|
|
|
|
2550ED60000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA150000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC375000
|
unkown image
|
page readonly
|
|
|
|
170C4570000
|
unkown image
|
page readonly
|
|
|
|
12664A7A000
|
unkown
|
page read and write
|
|
|
|
7DF5BA150000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC32D000
|
unkown image
|
page readonly
|
|
|
|
20E99810000
|
unkown image
|
page readonly
|
|
|
|
2550F560000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE4E000
|
unkown image
|
page readonly
|
|
|
|
2550EE2B000
|
unkown
|
page read and write
|
|
|
|
20E99860000
|
unkown
|
page read and write
|
|
|
|
7FF52AE7E000
|
unkown image
|
page readonly
|
|
|
|
7FF52AF21000
|
unkown image
|
page readonly
|
|
|
|
7FF52AD8C000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE33000
|
unkown image
|
page readonly
|
|
|
|
20E997E0000
|
unkown
|
page read and write
|
|
|
|
6D137F000
|
stack
|
page read and write
|
|
|
|
6D1477000
|
stack
|
page read and write
|
|
|
|
7FF52AF1A000
|
unkown image
|
page readonly
|
|
|
|
F2AD67E000
|
stack
|
page read and write
|
|
|
|
2550F010000
|
unkown
|
page read and write
|
|
|
|
2550EE3E000
|
unkown
|
page read and write
|
|
|
|
7FF5AC44E000
|
unkown image
|
page readonly
|
|
|
|
180000000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC46A000
|
unkown image
|
page readonly
|
|
|
|
20E99840000
|
heap private
|
page read and write
|
|
|
|
20E996A0000
|
unkown image
|
page readonly
|
|
|
|
7FF52ACF0000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE57000
|
unkown image
|
page readonly
|
|
|
|
170C4613000
|
heap default
|
page read and write
|
|
|
|
7FF52A736000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC231000
|
unkown image
|
page readonly
|
|
|
|
2550EE28000
|
unkown
|
page read and write
|
|
|
|
12664B13000
|
unkown
|
page read and write
|
|
|
|
7FF52AA07000
|
unkown image
|
page readonly
|
|
|
|
12664A54000
|
unkown
|
page read and write
|
|
|
|
45EF3BB000
|
unkown
|
page read and write
|
|
|
|
2550EE34000
|
unkown
|
page read and write
|
|
|
|
7FF52AD75000
|
unkown image
|
page readonly
|
|
|
|
7FF5EC3B1000
|
unkown image
|
page readonly
|
|
|
|
7FF52AF04000
|
unkown image
|
page readonly
|
|
|
|
255120D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC371000
|
unkown image
|
page readonly
|
|
|
|
20E998D0000
|
heap default
|
page read and write
|
|
|
|
2550EE4F000
|
unkown
|
page read and write
|
|
|
|
12664B02000
|
unkown
|
page read and write
|
|
|
|
2550EE56000
|
unkown
|
page read and write
|
|
|
|
2550ED80000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC302000
|
unkown image
|
page readonly
|
|
|
|
2550F000000
|
unkown image
|
page readonly
|
|
There are 267 hidden memdumps, click here to show them.