"Drek"
Process Hacker 2 > Javaw.exe >Miscellanus > Unloaded Modules (we will find something like: namefile.DLL)
"Kurium"
Process Hacker 2 > Jawaw.exe > Properties > Memory > Strings 4 >Filter >Contains (case-insensitive)
Keywords: memememememem
10.10.40
10.10.10.80
10.10.10
10.10.2
10.10.2.10...