Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll64.exe
|
loaddll64.exe "C:\Users\user\Desktop\24ff7d60000.dll"
|
 |
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\24ff7d60000.dll,#1
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\24ff7d60000.dll",#1
|
|
|
|
C:\Windows\System32\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\24ff7d60000.dll",#1
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7DF5E3B80000
|
unkown image
|
page readonly
|
||
|
7FF5F1110000
|
unkown image
|
page readonly
|
||
|
7FF54735A000
|
unkown image
|
page readonly
|
||
|
A053AFE000
|
stack
|
page read and write
|
||
|
7FF5DA5D8000
|
unkown image
|
page readonly
|
||
|
16B3F270000
|
unkown image
|
page read and write
|
||
|
7DF5E4562000
|
unkown image
|
page readonly
|
||
|
16B3F330000
|
unkown image
|
page readonly
|
||
|
7FF5D9D3E000
|
unkown image
|
page readonly
|
||
|
7FF5DA787000
|
unkown image
|
page readonly
|
||
|
1E071930000
|
heap private
|
page read and write
|
||
|
16B3F3A7000
|
unkown
|
page read and write
|
||
|
16B3F663000
|
heap private
|
page read and write
|
||
|
1E071520000
|
unkown image
|
page readonly
|
||
|
7FF5DA587000
|
unkown image
|
page readonly
|
||
|
7DF5512D2000
|
unkown image
|
page readonly
|
||
|
7FF5D9DE7000
|
unkown image
|
page readonly
|
||
|
7FF5DA79A000
|
unkown image
|
page readonly
|
||
|
7DF5512E2000
|
unkown image
|
page readonly
|
||
|
7FF5474ED000
|
unkown image
|
page readonly
|
||
|
25AD4418000
|
heap default
|
page read and write
|
||
|
7FF5DA7B6000
|
unkown image
|
page readonly
|
||
|
16B3F2E0000
|
unkown
|
page read and write
|
||
|
7FF5DA7C2000
|
unkown image
|
page readonly
|
||
|
7FF5F1120000
|
unkown image
|
page readonly
|
||
|
6E9DAFD000
|
unkown
|
page read and write
|
||
|
7FF5F1102000
|
unkown image
|
page readonly
|
||
|
7FF5D9C65000
|
unkown image
|
page readonly
|
||
|
7DF5512F0000
|
unkown image
|
page readonly
|
||
|
1E071940000
|
unkown image
|
page readonly
|
||
|
7FF5DA277000
|
unkown image
|
page readonly
|
||
|
7DF5E3B82000
|
unkown image
|
page readonly
|
||
|
39E1DF7000
|
stack
|
page read and write
|
||
|
1E0716FF000
|
unkown
|
page read and write
|
||
|
7FF54748E000
|
unkown image
|
page readonly
|
||
|
1E691F02000
|
unkown
|
page read and write
|
||
|
1E692450000
|
unkown image
|
page readonly
|
||
|
7FF5DA706000
|
unkown image
|
page readonly
|
||
|
7FF5D9DA4000
|
unkown image
|
page readonly
|
||
|
1E691E13000
|
unkown
|
page read and write
|
||
|
16B3F9E0000
|
unkown image
|
page readonly
|
||
|
1E07193B000
|
heap private
|
page read and write
|
||
|
16B42B10000
|
unkown
|
page read and write
|
||
|
25AD4300000
|
unkown image
|
page read and write
|
||
|
1E691D60000
|
unkown image
|
page readonly
|
||
|
7FF54747D000
|
unkown image
|
page readonly
|
||
|
7FF5D9D97000
|
unkown image
|
page readonly
|
||
|
7FF5474FB000
|
unkown image
|
page readonly
|
||
|
7FF5DA6EA000
|
unkown image
|
page readonly
|
||
|
7FF547348000
|
unkown image
|
page readonly
|
||
|
1E0716A0000
|
unkown image
|
page readonly
|
||
|
7FF5DA6BF000
|
unkown image
|
page readonly
|
||
|
39E1A7E000
|
stack
|
page read and write
|
||
|
16B3F300000
|
unkown
|
page read and write
|
||
|
1E071935000
|
heap private
|
page read and write
|
||
|
7DF5E4562000
|
unkown image
|
page readonly
|
||
|
1E071670000
|
unkown image
|
page readonly
|
||
|
1E0716E8000
|
heap default
|
page read and write
|
||
|
1E691E65000
|
unkown
|
page read and write
|
||
|
7FF547195000
|
unkown image
|
page readonly
|
||
|
7FF5DA7C7000
|
unkown image
|
page readonly
|
||
|
1E691DC0000
|
unkown image
|
page readonly
|
||
|
7FF5D9A45000
|
unkown image
|
page readonly
|
||
|
180000000
|
unkown image
|
page readonly
|
||
|
7FF5F1110000
|
unkown image
|
page readonly
|
||
|
7DF5512E0000
|
unkown image
|
page readonly
|
||
|
7FF5F1112000
|
unkown image
|
page readonly
|
||
|
16B3F7E0000
|
unkown image
|
page readonly
|
||
|
7FF5DA608000
|
unkown image
|
page readonly
|
||
|
25AD4370000
|
unkown
|
page read and write
|
||
|
7FF547503000
|
unkown image
|
page readonly
|
||
|
16B3F280000
|
unkown image
|
page readonly
|
||
|
7FF5DA436000
|
unkown image
|
page readonly
|
||
|
7FF54734E000
|
unkown image
|
page readonly
|
||
|
7FF5DA77D000
|
unkown image
|
page readonly
|
||
|
7FF5D9C0A000
|
unkown image
|
page readonly
|
||
|
7FF5D9D94000
|
unkown image
|
page readonly
|
||
|
6E9DCFF000
|
stack
|
page read and write
|
||
|
7FF5DA7B3000
|
unkown image
|
page readonly
|
||
|
7FF5474F7000
|
unkown image
|
page readonly
|
||
|
7FF5D9D06000
|
unkown image
|
page readonly
|
||
|
39E1EFF000
|
stack
|
page read and write
|
||
|
7FF5D9DAB000
|
unkown image
|
page readonly
|
||
|
7FF5DA6D3000
|
unkown image
|
page readonly
|
||
|
1E691D40000
|
unkown image
|
page read and write
|
||
|
7FF5DA5D5000
|
unkown image
|
page readonly
|
||
|
16B3F2B0000
|
unkown image
|
page readonly
|
||
|
7FF5474F4000
|
unkown image
|
page readonly
|
||
|
7DF5512E0000
|
unkown image
|
page readonly
|
||
|
7FF547476000
|
unkown image
|
page readonly
|
||
|
1E071680000
|
unkown
|
page read and write
|
||
|
1E691DE0000
|
unkown
|
page read and write
|
||
|
7FF5DA771000
|
unkown image
|
page readonly
|
||
|
16B3F69B000
|
heap private
|
page read and write
|
||
|
16B3F660000
|
heap private
|
page read and write
|
||
|
7FF547456000
|
unkown image
|
page readonly
|
||
|
7FF5D9DB3000
|
unkown image
|
page readonly
|
||
|
1E0716E0000
|
heap default
|
page read and write
|
||
|
16B3F3AB000
|
unkown
|
page read and write
|
||
|
39E1FFF000
|
stack
|
page read and write
|
||
|
7FF5DA78B000
|
unkown image
|
page readonly
|
||
|
7DF5E3BA0000
|
unkown image
|
page readonly
|
||
|
7FF5DA6E6000
|
unkown image
|
page readonly
|
||
|
16B3F3B3000
|
unkown
|
page read and write
|
||
|
39E1C7B000
|
stack
|
page read and write
|
||
|
16B3F3AE000
|
unkown
|
page read and write
|
||
|
16B3F695000
|
heap private
|
page read and write
|
||
|
1E071CC0000
|
unkown image
|
page readonly
|
||
|
25AD4423000
|
heap default
|
page read and write
|
||
|
1E07170B000
|
unkown
|
page read and write
|
||
|
1E071703000
|
unkown
|
page read and write
|
||
|
7DF5E4560000
|
unkown image
|
page readonly
|
||
|
1E691D80000
|
unkown image
|
page readonly
|
||
|
1E691F08000
|
unkown
|
page read and write
|
||
|
7FF5D9D26000
|
unkown image
|
page readonly
|
||
|
7DF44F1A0000
|
unkown image
|
page readonly
|
||
|
1E074960000
|
unkown
|
page read and write
|
||
|
7FF5D9DE7000
|
unkown image
|
page readonly
|
||
|
7FF5D9DBA000
|
unkown image
|
page readonly
|
||
|
7FF5D9DDB000
|
unkown image
|
page readonly
|
||
|
7FF5DA645000
|
unkown image
|
page readonly
|
||
|
7DF5E3B92000
|
unkown image
|
page readonly
|
||
|
25AD4320000
|
unkown image
|
page readonly
|
||
|
1E0730E0000
|
unkown
|
page read and write
|
||
|
1E074DA0000
|
unkown
|
page read and write
|
||
|
7DF5E3B92000
|
unkown image
|
page readonly
|
||
|
1E691E82000
|
unkown
|
page read and write
|
||
|
7DF5512D0000
|
unkown image
|
page readonly
|
||
|
7DF5E4560000
|
unkown image
|
page readonly
|
||
|
7FF4EEFD0000
|
unkown image
|
page readonly
|
||
|
16B3F560000
|
unkown image
|
page readonly
|
||
|
1E691E70000
|
unkown
|
page read and write
|
||
|
7FF5DA6C1000
|
unkown image
|
page readonly
|
||
|
7FF5DA6F2000
|
unkown image
|
page readonly
|
||
|
7FF5DA597000
|
unkown image
|
page readonly
|
||
|
7FF5DA777000
|
unkown image
|
page readonly
|
||
|
1E691E00000
|
unkown
|
page read and write
|
||
|
7FF547523000
|
unkown image
|
page readonly
|
||
|
7FF5474E7000
|
unkown image
|
page readonly
|
||
|
7FF5473D7000
|
unkown image
|
page readonly
|
||
|
1E691F00000
|
unkown
|
page read and write
|
||
|
7FF5D9D9D000
|
unkown image
|
page readonly
|
||
|
7FF5473B5000
|
unkown image
|
page readonly
|
||
|
39E172B000
|
unkown
|
page read and write
|
||
|
1E0716C0000
|
unkown
|
page read and write
|
||
|
7DF5E3B82000
|
unkown image
|
page readonly
|
||
|
1E071640000
|
unkown
|
page read and write
|
||
|
16B40F80000
|
unkown
|
page read and write
|
||
|
7FF5DA271000
|
unkown image
|
page readonly
|
||
|
7FF5DA5B6000
|
unkown image
|
page readonly
|
||
|
16B3F290000
|
unkown image
|
page readonly
|
||
|
16B3F3B4000
|
unkown
|
page read and write
|
||
|
1E071703000
|
unkown
|
page read and write
|
||
|
7FF5473E1000
|
unkown image
|
page readonly
|
||
|
16B3F3B3000
|
unkown
|
page read and write
|
||
|
25AD4350000
|
unkown image
|
page readonly
|
||
|
A0537AB000
|
unkown
|
page read and write
|
||
|
1E074830000
|
unkown image
|
page readonly
|
||
|
6E9DBFF000
|
stack
|
page read and write
|
||
|
16B3F3B0000
|
unkown
|
page read and write
|
||
|
7FF5F1120000
|
unkown image
|
page readonly
|
||
|
7FF54750A000
|
unkown image
|
page readonly
|
||
|
1E071703000
|
unkown
|
page read and write
|
||
|
1E691D50000
|
heap private
|
page read and write
|
||
|
1E691DB0000
|
heap default
|
page read and write
|
||
|
7FF547445000
|
unkown image
|
page readonly
|
||
|
1E0714E0000
|
unkown image
|
page read and write
|
||
|
1E071620000
|
unkown
|
page read and write
|
||
|
16B3F39E000
|
heap default
|
page read and write
|
||
|
1E071710000
|
unkown
|
page read and write
|
||
|
3F070FE000
|
stack
|
page read and write
|
||
|
39E1CFE000
|
stack
|
page read and write
|
||
|
7FF5DA717000
|
unkown image
|
page readonly
|
||
|
7FF5D9C91000
|
unkown image
|
page readonly
|
||
|
1E0716FB000
|
unkown
|
page read and write
|
||
|
25AD4410000
|
heap default
|
page read and write
|
||
|
16B3FB60000
|
unkown image
|
page readonly
|
||
|
7FF5F1100000
|
unkown image
|
page readonly
|
||
|
7DF5E4580000
|
unkown image
|
page readonly
|
||
|
A053A7E000
|
stack
|
page read and write
|
||
|
7DF5512E2000
|
unkown image
|
page readonly
|
||
|
1E074950000
|
heap private
|
page read and write
|
||
|
1E691E3C000
|
unkown
|
page read and write
|
||
|
7FF547487000
|
unkown image
|
page readonly
|
||
|
16B3F690000
|
heap private
|
page read and write
|
||
|
7DF5512D0000
|
unkown image
|
page readonly
|
||
|
16B3F360000
|
unkown image
|
page readonly
|
||
|
1E6922D0000
|
unkown image
|
page readonly
|
||
|
39E17AE000
|
stack
|
page read and write
|
||
|
7FF54752B000
|
unkown image
|
page readonly
|
||
|
7DF4E2430000
|
unkown image
|
page readonly
|
||
|
7FF5D9D2D000
|
unkown image
|
page readonly
|
||
|
1E6920D0000
|
unkown image
|
page readonly
|
||
|
7FF5F1102000
|
unkown image
|
page readonly
|
||
|
7FF547407000
|
unkown image
|
page readonly
|
||
|
7FF5DA6DD000
|
unkown image
|
page readonly
|
||
|
1E07170B000
|
unkown
|
page read and write
|
||
|
7FF5D9DD3000
|
unkown image
|
page readonly
|
||
|
7DF5512F0000
|
unkown image
|
page readonly
|
||
|
1E071B40000
|
unkown image
|
page readonly
|
||
|
1E071500000
|
unkown image
|
page readonly
|
||
|
7FF5D9BF8000
|
unkown image
|
page readonly
|
||
|
7FF5D9BFE000
|
unkown image
|
page readonly
|
||
|
16B3F2C0000
|
unkown image
|
page readonly
|
||
|
1E071500000
|
unkown image
|
page readonly
|
||
|
7DF5512D2000
|
unkown image
|
page readonly
|
||
|
7DF5E4572000
|
unkown image
|
page readonly
|
||
|
1E0716FB000
|
unkown
|
page read and write
|
||
|
7FF547526000
|
unkown image
|
page readonly
|
||
|
16B3F370000
|
unkown
|
page read and write
|
||
|
7FF5F1112000
|
unkown image
|
page readonly
|
||
|
7FF5D9CF5000
|
unkown image
|
page readonly
|
||
|
7DF5E3B90000
|
unkown image
|
page readonly
|
||
|
7FF5DA774000
|
unkown image
|
page readonly
|
||
|
7FF5DA784000
|
unkown image
|
page readonly
|
||
|
16B3F3BB000
|
unkown
|
page read and write
|
||
|
1E691D90000
|
unkown image
|
page readonly
|
||
|
7DF5E4570000
|
unkown image
|
page readonly
|
||
|
25AD4320000
|
unkown image
|
page readonly
|
||
|
16B3F340000
|
unkown
|
page read and write
|
||
|
7FF5DA7C7000
|
unkown image
|
page readonly
|
||
|
7FF5D9D39000
|
unkown image
|
page readonly
|
||
|
1E692602000
|
unkown
|
page read and write
|
||
|
1E691E4D000
|
unkown
|
page read and write
|
||
|
7FF5DA6CF000
|
unkown image
|
page readonly
|
||
|
7DF5E3B80000
|
unkown image
|
page readonly
|
||
|
7FF5DA55A000
|
unkown image
|
page readonly
|
||
|
1E074953000
|
heap private
|
page read and write
|
||
|
16B3F3B3000
|
unkown
|
page read and write
|
||
|
16B3F290000
|
unkown image
|
page readonly
|
||
|
7FF5D9DD6000
|
unkown image
|
page readonly
|
||
|
1E071704000
|
unkown
|
page read and write
|
||
|
7FF5DA719000
|
unkown image
|
page readonly
|
||
|
7FF5D9C87000
|
unkown image
|
page readonly
|
||
|
1E691D60000
|
unkown image
|
page readonly
|
||
|
16B3F3B3000
|
unkown
|
page read and write
|
||
|
7FF5D9DA7000
|
unkown image
|
page readonly
|
||
|
16B3F3C1000
|
unkown
|
page read and write
|
||
|
7DF4E1A50000
|
unkown image
|
page readonly
|
||
|
1E0714F0000
|
unkown image
|
page readonly
|
||
|
1E071530000
|
unkown image
|
page readonly
|
||
|
7FF5DA70D000
|
unkown image
|
page readonly
|
||
|
16B3F3BB000
|
unkown
|
page read and write
|
||
|
7FF547537000
|
unkown image
|
page readonly
|
||
|
1E0716FF000
|
unkown
|
page read and write
|
||
|
7DF5E3B90000
|
unkown image
|
page readonly
|
||
|
7FF547489000
|
unkown image
|
page readonly
|
||
|
1E0716FF000
|
unkown
|
page read and write
|
||
|
1E691E53000
|
unkown
|
page read and write
|
||
|
16B3F390000
|
heap default
|
page read and write
|
||
|
7FF547537000
|
unkown image
|
page readonly
|
||
|
1E691F13000
|
unkown
|
page read and write
|
||
|
7DF5E3BA0000
|
unkown image
|
page readonly
|
||
|
3F0717E000
|
stack
|
page read and write
|
||
|
7DF5E4572000
|
unkown image
|
page readonly
|
||
|
16B3F3AB000
|
unkown
|
page read and write
|
||
|
16B3F399000
|
heap default
|
page read and write
|
||
|
7FF5DA5D0000
|
unkown image
|
page readonly
|
||
|
16B426D0000
|
unkown
|
page read and write
|
||
|
7FF5474E4000
|
unkown image
|
page readonly
|
||
|
7DF5E4580000
|
unkown image
|
page readonly
|
||
|
7FF5D9CB7000
|
unkown image
|
page readonly
|
||
|
1E691E2A000
|
unkown
|
page read and write
|
||
|
25AD4340000
|
unkown image
|
page readonly
|
||
|
3F0707B000
|
unkown
|
page read and write
|
||
|
7FF5F1100000
|
unkown image
|
page readonly
|
||
|
7DF5E4570000
|
unkown image
|
page readonly
|
||
|
7FF5D9D37000
|
unkown image
|
page readonly
|
||
|
7FF5DA431000
|
unkown image
|
page readonly
|
There are 259 hidden memdumps, click here to show them.