Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
initial sample
|
 |
|||
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\h63gwz2mqbo70kvt815cyspe4f9nxajrludi7de5wx0q6i4fs1hv2onz9urymlbjk3ca8tgp3a0io5tnzp1mxqvde92ufk87hrcwg4ly6jsb[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3A7C75D4-5609-11EB-90E6-ECF4BB82F7E0}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3A7C75D6-5609-11EB-90E6-ECF4BB82F7E0}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{41337441-5609-11EB-90E6-ECF4BB82F7E0}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\po60zt0\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\arrow_left[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\conv[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\inv-big-background[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\inv-small-background[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x28, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\passwrd[1].png
|
PNG image data, 69 x 34, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\ellipsis_white[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\ns1[1].png
|
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\sigin[1].png
|
PNG image data, 108 x 32, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\ZXNjdWxsaW5AbnMxLmNvbQ==[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\favicon[1].ico
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\forgetpass[1].png
|
PNG image data, 121 x 20, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\ellipsis_grey[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\enterpass[1].png
|
PNG image data, 170 x 29, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9B608BFAD4BAA3C2.TMP
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE26B57A9F59CC8F5.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFFC49718EF75D1642.TMP
|
data
|
dropped
|
|
There are 12 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3960 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://lobnet.org/tok/h63gwz2mqbo70kvt815cyspe4f9nxajrludi7de5wx0q6i4fs1hv2onz9urymlbjk3ca8tgp3a0io5tnzp1mxqvde92ufk87hrcwg4ly6jsb?data=ZXNjdWxsaW5AbnMxLmNvbQ==
|
|
||
|
https://facop5.com/toj/ZXNjdWxsaW5AbnMxLmNvbQ==Root
|
unknown
|
|
|
|
https://facop5.com/toj/ZXNjdWxsaW5AbnMxLmNvbQ==
|
unknown
|
|
|
|
https://lobnet.org/tok/ZXNjdWxsaW5AbnMxLmNvbQ==
|
unknown
|
|
|
|
https://lobnet.org/tok/ZXNjdWxsaW5AbnMxLmNvbQ==/h63gwz2mqbo70kvt815cyspe4f9nxajrludi7de5wx0q6i4fs1hv
|
unknown
|
|
|
|
https://lobnet.org/tok/images/favicon.ico~
|
unknown
|
|
|
|
https://lobnet.org/tok/h63gwz2mqbo70kvt815cyspe4f9nxajrludi7de5wx0q6i4fs1hv2onz9urymlbjk3ca8tgp3a0io
|
unknown
|
|
|
|
https://logo.clearbit.com/ns1.com
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
d26p066pn2w0s0.cloudfront.net
|
13.224.194.19
|
|
|
|
facop5.com
|
162.144.238.203
|
|
|
|
lobnet.org
|
162.144.238.203
|
|
|
|
logo.clearbit.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
162.144.238.203
|
unknown
|
United States
|
unknown
|
|
|
|
13.224.194.19
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{3A7C75D4-5609-11EB-90E6-ECF4BB82F7E0}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
There are 11 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF533918000
|
unkown
|
page readonly
|
|
|
|
7FF533994000
|
unkown
|
page readonly
|
|
|
|
7FF533A03000
|
unkown
|
page readonly
|
|
|
|
21A04200000
|
heap private
|
page read and write
|
|
|
|
21A098C0000
|
unkown
|
page read and write
|
|
|
|
21A09C70000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D6C000
|
unkown
|
page readonly
|
|
|
|
1DECD64D000
|
unkown
|
page read and write
|
|
|
|
21A04513000
|
unkown
|
page read and write
|
|
|
|
A934A7E000
|
unkown
|
page read and write
|
|
|
|
21A09C20000
|
unkown
|
page read and write
|
|
|
|
7FF5338D0000
|
unkown
|
page readonly
|
|
|
|
D93DEFC000
|
unkown
|
page read and write
|
|
|
|
2658E69F000
|
heap private
|
page read and write
|
|
|
|
21A09904000
|
unkown
|
page read and write
|
|
|
|
7EF96FA000
|
unkown
|
page read and write
|
|
|
|
7FF5E9386000
|
unkown
|
page readonly
|
|
|
|
21A044BD000
|
unkown
|
page read and write
|
|
|
|
21A04C15000
|
unkown
|
page read and write
|
|
|
|
21A09A60000
|
unkown
|
page read and write
|
|
|
|
2658C8FE000
|
heap default
|
page read and write
|
|
|
|
21A04413000
|
unkown
|
page read and write
|
|
|
|
21A04470000
|
unkown
|
page read and write
|
|
|
|
7FF5338B1000
|
unkown
|
page readonly
|
|
|
|
7FF5A7CFF000
|
unkown
|
page readonly
|
|
|
|
7FF53387C000
|
unkown
|
page readonly
|
|
|
|
7FF5A7DDC000
|
unkown
|
page readonly
|
|
|
|
21A09D10000
|
unkown
|
page read and write
|
|
|
|
7FF5E91E0000
|
unkown
|
page readonly
|
|
|
|
21A053D0000
|
unkown
|
page readonly
|
|
|
|
21A04D18000
|
unkown
|
page read and write
|
|
|
|
7FF5338FB000
|
unkown
|
page readonly
|
|
|
|
21A0447A000
|
unkown
|
page read and write
|
|
|
|
7EF99FF000
|
unkown
|
page read and write
|
|
|
|
2658C9C0000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D31000
|
unkown
|
page readonly
|
|
|
|
21A05400000
|
unkown
|
page readonly
|
|
|
|
7FF533880000
|
unkown
|
page readonly
|
|
|
|
21A09D20000
|
unkown
|
page readonly
|
|
|
|
1DECD702000
|
unkown
|
page read and write
|
|
|
|
7EF95FF000
|
unkown
|
page read and write
|
|
|
|
1DECD67F000
|
unkown
|
page read and write
|
|
|
|
7FF5336C9000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D76000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D62000
|
unkown
|
page readonly
|
|
|
|
7FF533931000
|
unkown
|
page readonly
|
|
|
|
21A05200000
|
unkown
|
page read and write
|
|
|
|
21A04C00000
|
unkown
|
page read and write
|
|
|
|
21A09990000
|
unkown
|
page readonly
|
|
|
|
7FF533924000
|
unkown
|
page readonly
|
|
|
|
7FF53327F000
|
unkown
|
page readonly
|
|
|
|
21A0449E000
|
unkown
|
page read and write
|
|
|
|
7EF94FB000
|
unkown
|
page read and write
|
|
|
|
21A099C4000
|
unkown
|
page write copy
|
|
|
|
7FF533274000
|
unkown
|
page readonly
|
|
|
|
21A04340000
|
unkown
|
page readonly
|
|
|
|
7FF5331F9000
|
unkown
|
page readonly
|
|
|
|
21A09A20000
|
unkown
|
page read and write
|
|
|
|
21A09C60000
|
unkown
|
page readonly
|
|
|
|
7FF5335F9000
|
unkown
|
page readonly
|
|
|
|
7FF5339F5000
|
unkown
|
page readonly
|
|
|
|
21A053E0000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D21000
|
unkown
|
page readonly
|
|
|
|
7FF5336FF000
|
unkown
|
page readonly
|
|
|
|
7FF5337AB000
|
unkown
|
page readonly
|
|
|
|
7FF5E9396000
|
unkown
|
page readonly
|
|
|
|
7FF5E930C000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D08000
|
unkown
|
page readonly
|
|
|
|
1DECD613000
|
unkown
|
page read and write
|
|
|
|
21A053C0000
|
unkown
|
page readonly
|
|
|
|
D93DBF5000
|
unkown
|
page read and write
|
|
|
|
7FF5A7DF3000
|
unkown
|
page readonly
|
|
|
|
2658CA30000
|
unkown
|
page readonly
|
|
|
|
7FF533558000
|
unkown
|
page readonly
|
|
|
|
7FF5E92AF000
|
unkown
|
page readonly
|
|
|
|
7FF5E921C000
|
unkown
|
page readonly
|
|
|
|
1DECDE02000
|
unkown
|
page read and write
|
|
|
|
7FF5A79DA000
|
unkown
|
page readonly
|
|
|
|
21A097B0000
|
unkown
|
page read and write
|
|
|
|
7FF5A7D84000
|
unkown
|
page readonly
|
|
|
|
21A04600000
|
unkown
|
page readonly
|
|
|
|
7FF533762000
|
unkown
|
page readonly
|
|
|
|
7FF53366D000
|
unkown
|
page readonly
|
|
|
|
2658CA40000
|
unkown
|
page readonly
|
|
|
|
2658C7B0000
|
unkown
|
page readonly
|
|
|
|
7FF533284000
|
unkown
|
page readonly
|
|
|
|
1DECD650000
|
unkown
|
page read and write
|
|
|
|
A934CFE000
|
unkown
|
page read and write
|
|
|
|
21A04475000
|
unkown
|
page read and write
|
|
|
|
7FF53370E000
|
unkown
|
page readonly
|
|
|
|
7FF533986000
|
unkown
|
page readonly
|
|
|
|
7EF9E7F000
|
unkown
|
page read and write
|
|
|
|
21A098E1000
|
unkown
|
page read and write
|
|
|
|
21A097A0000
|
unkown
|
page read and write
|
|
|
|
1DECD580000
|
heap default
|
page read and write
|
|
|
|
7FF5A7B09000
|
unkown
|
page readonly
|
|
|
|
21A09990000
|
unkown
|
page read and write
|
|
|
|
7FF5A7DF3000
|
unkown
|
page readonly
|
|
|
|
7FF533735000
|
unkown
|
page readonly
|
|
|
|
2658E5A0000
|
heap private
|
page read and write
|
|
|
|
21A04270000
|
unkown
|
page readonly
|
|
|
|
21A09A57000
|
unkown
|
page read and write
|
|
|
|
21A09A22000
|
unkown
|
page read and write
|
|
|
|
7FF5337CD000
|
unkown
|
page readonly
|
|
|
|
7FF533979000
|
unkown
|
page readonly
|
|
|
|
1DECD64B000
|
unkown
|
page read and write
|
|
|
|
A93474C000
|
unkown
|
page read and write
|
|
|
|
1DECD590000
|
unkown
|
page readonly
|
|
|
|
7EF9A7E000
|
unkown
|
page read and write
|
|
|
|
21A04C02000
|
unkown
|
page read and write
|
|
|
|
7FF5337B0000
|
unkown
|
page readonly
|
|
|
|
21A09D40000
|
unkown
|
page readonly
|
|
|
|
21A098E4000
|
unkown
|
page read and write
|
|
|
|
D93DFFE000
|
unkown
|
page read and write
|
|
|
|
7FF5337B5000
|
unkown
|
page readonly
|
|
|
|
21A098CE000
|
unkown
|
page read and write
|
|
|
|
21A04350000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D10000
|
unkown
|
page readonly
|
|
|
|
1DECD520000
|
heap private
|
page read and write
|
|
|
|
21A05760000
|
unkown
|
page read and write
|
|
|
|
7FF5E9334000
|
unkown
|
page readonly
|
|
|
|
7FF5339E6000
|
unkown
|
page readonly
|
|
|
|
7FF5336ED000
|
unkown
|
page readonly
|
|
|
|
7EF997F000
|
unkown
|
page read and write
|
|
|
|
7EF92F8000
|
unkown
|
page read and write
|
|
|
|
1DECD652000
|
unkown
|
page read and write
|
|
|
|
2658E380000
|
heap private
|
page read and write
|
|
|
|
7FF533875000
|
unkown
|
page readonly
|
|
|
|
21A098F0000
|
unkown
|
page read and write
|
|
|
|
A9347CE000
|
unkown
|
page read and write
|
|
|
|
21A04D18000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C97000
|
unkown
|
page readonly
|
|
|
|
21A04360000
|
unkown
|
page read and write
|
|
|
|
21A043F3000
|
unkown
|
page read and write
|
|
|
|
2658CA20000
|
unkown
|
page readonly
|
|
|
|
21A04D59000
|
unkown
|
page read and write
|
|
|
|
7FF5E9319000
|
unkown
|
page readonly
|
|
|
|
21A04260000
|
heap default
|
page read and write
|
|
|
|
21A05420000
|
unkown
|
page readonly
|
|
|
|
7FF533941000
|
unkown
|
page readonly
|
|
|
|
21A09C00000
|
unkown
|
page read and write
|
|
|
|
7FF5A7CEB000
|
unkown
|
page readonly
|
|
|
|
7FF5E92D1000
|
unkown
|
page readonly
|
|
|
|
21A09993000
|
unkown
|
page readonly
|
|
|
|
7FF533A03000
|
unkown
|
page readonly
|
|
|
|
7FF5E9028000
|
unkown
|
page readonly
|
|
|
|
7EF8EAB000
|
unkown
|
page read and write
|
|
|
|
7FF5A7D29000
|
unkown
|
page readonly
|
|
|
|
7FF5E916D000
|
unkown
|
page readonly
|
|
|
|
1DECD63C000
|
unkown
|
page read and write
|
|
|
|
1DECD670000
|
unkown
|
page read and write
|
|
|
|
7FF5A7DD6000
|
unkown
|
page readonly
|
|
|
|
21A09C20000
|
unkown
|
page readonly
|
|
|
|
21A099B0000
|
unkown
|
page write copy
|
|
|
|
21A09A41000
|
unkown
|
page read and write
|
|
|
|
D93D7AB000
|
unkown
|
page read and write
|
|
|
|
7FF533810000
|
unkown
|
page readonly
|
|
|
|
1DECD708000
|
unkown
|
page read and write
|
|
|
|
7FF5E929C000
|
unkown
|
page readonly
|
|
|
|
1DECD68C000
|
unkown
|
page read and write
|
|
|
|
7FF533569000
|
unkown
|
page readonly
|
|
|
|
21A043F0000
|
unkown
|
page read and write
|
|
|
|
D93DDF7000
|
unkown
|
page read and write
|
|
|
|
21A099C7000
|
unkown
|
page write copy
|
|
|
|
D93DCFB000
|
unkown
|
page read and write
|
|
|
|
7EF9C7A000
|
unkown
|
page read and write
|
|
|
|
21A04BD0000
|
unkown
|
page read and write
|
|
|
|
7FF5E92F5000
|
unkown
|
page readonly
|
|
|
|
7FF5E91DA000
|
unkown
|
page readonly
|
|
|
|
21A04990000
|
unkown
|
page readonly
|
|
|
|
1DECD602000
|
unkown
|
page read and write
|
|
|
|
1DECD8D0000
|
unkown
|
page readonly
|
|
|
|
21A09770000
|
unkown
|
page readonly
|
|
|
|
7FF5E92B5000
|
unkown
|
page readonly
|
|
|
|
2658C750000
|
unkown
|
page readonly
|
|
|
|
21A09A4E000
|
unkown
|
page read and write
|
|
|
|
2658CA60000
|
unkown
|
page readonly
|
|
|
|
7FF5338E0000
|
unkown
|
page readonly
|
|
|
|
2658C8C0000
|
heap default
|
page read and write
|
|
|
|
21A09D00000
|
unkown
|
page readonly
|
|
|
|
21A05410000
|
unkown
|
page readonly
|
|
|
|
2658E440000
|
heap private
|
page read and write
|
|
|
|
7FF533711000
|
unkown
|
page readonly
|
|
|
|
1DECD600000
|
unkown
|
page read and write
|
|
|
|
7FF53390B000
|
unkown
|
page readonly
|
|
|
|
7FF5E92B8000
|
unkown
|
page readonly
|
|
|
|
7FF5E9149000
|
unkown
|
page readonly
|
|
|
|
7EF93FB000
|
unkown
|
page read and write
|
|
|
|
1DECD629000
|
unkown
|
page read and write
|
|
|
|
7FF5338DC000
|
unkown
|
page readonly
|
|
|
|
7FF5A79A5000
|
unkown
|
page readonly
|
|
|
|
21A09C20000
|
unkown
|
page read and write
|
|
|
|
21A099D0000
|
unkown
|
page read and write
|
|
|
|
21A099B4000
|
unkown
|
page readonly
|
|
|
|
7FF5E8EA6000
|
unkown
|
page readonly
|
|
|
|
1DECD700000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C9D000
|
unkown
|
page readonly
|
|
|
|
7FF5E93A3000
|
unkown
|
page readonly
|
|
|
|
21A099E0000
|
unkown
|
page read and write
|
|
|
|
7EF9D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5E9102000
|
unkown
|
page readonly
|
|
|
|
1DECE340000
|
unkown
|
page readonly
|
|
|
|
7EF9B7E000
|
unkown
|
page read and write
|
|
|
|
21A04D02000
|
unkown
|
page read and write
|
|
|
|
7FF53368F000
|
unkown
|
page readonly
|
|
|
|
21A09A9B000
|
unkown
|
page read and write
|
|
|
|
21A04458000
|
unkown
|
page read and write
|
|
|
|
21A04400000
|
unkown
|
page read and write
|
|
|
|
1DECD5B0000
|
unkown
|
page read and write
|
|
|
|
21A043D1000
|
unkown
|
page read and write
|
|
|
|
2658C8CB000
|
heap default
|
page read and write
|
|
|
|
7EF9AFE000
|
unkown
|
page read and write
|
|
|
|
1DECD713000
|
unkown
|
page read and write
|
|
|
|
21A099F0000
|
unkown
|
page read and write
|
|
|
|
2658CA50000
|
heap private
|
page read and write
|
|
|
|
7FF5337F1000
|
unkown
|
page readonly
|
|
|
|
21A053F0000
|
unkown
|
page readonly
|
|
|
|
21A09C20000
|
unkown
|
page read and write
|
|
|
|
21A09A10000
|
unkown
|
page read and write
|
|
|
|
7EF97FB000
|
unkown
|
page read and write
|
|
|
|
D93DAFF000
|
unkown
|
page read and write
|
|
|
|
7FF5E9175000
|
unkown
|
page readonly
|
|
|
|
21A0448E000
|
unkown
|
page read and write
|
|
|
|
21A04D13000
|
unkown
|
page read and write
|
|
|
|
D93E0FE000
|
unkown
|
page read and write
|
|
|
|
2658CDF0000
|
unkown
|
page readonly
|
|
|
|
7FF533596000
|
unkown
|
page readonly
|
|
|
|
21A044FF000
|
unkown
|
page read and write
|
|
|
|
7FF5335B1000
|
unkown
|
page readonly
|
|
|
|
7FF5335F3000
|
unkown
|
page readonly
|
|
|
|
7FF5E9312000
|
unkown
|
page readonly
|
|
|
|
A934BFE000
|
unkown
|
page read and write
|
|
|
|
7FF5338D4000
|
unkown
|
page readonly
|
|
|
|
1DECE000000
|
unkown
|
page readonly
|
|
|
|
7FF5E92C0000
|
unkown
|
page readonly
|
|
|
|
21A098E0000
|
unkown
|
page read and write
|
|
|
|
7FF533955000
|
unkown
|
page readonly
|
|
|
|
21A098C0000
|
unkown
|
page read and write
|
|
|
|
D93DA7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E8EAC000
|
unkown
|
page readonly
|
|
|
|
21A04E01000
|
unkown
|
page read and write
|
|
|
|
2658C8A0000
|
unkown
|
page read and write
|
|
|
|
21A09A30000
|
unkown
|
page read and write
|
|
|
|
7FF53396B000
|
unkown
|
page readonly
|
|
|
|
21A09C80000
|
unkown
|
page readonly
|
|
|
|
21A09A00000
|
unkown
|
page read and write
|
|
|
|
21A097C0000
|
unkown
|
page read and write
|
|
|
|
7EF8F2E000
|
unkown
|
page read and write
|
|
|
|
7FF5338C4000
|
unkown
|
page readonly
|
|
|
|
21A09A83000
|
unkown
|
page read and write
|
|
|
|
7FF5A7D45000
|
unkown
|
page readonly
|
|
|
|
7FF533215000
|
unkown
|
page readonly
|
|
|
|
21A044A6000
|
unkown
|
page read and write
|
|
|
|
7EF987E000
|
unkown
|
page read and write
|
|
|
|
7FF5335D2000
|
unkown
|
page readonly
|
|
|
|
7FF53397C000
|
unkown
|
page readonly
|
|
|
|
7FF5E92D9000
|
unkown
|
page readonly
|
|
|
|
21A04D58000
|
unkown
|
page read and write
|
|
|
|
7FF5E916F000
|
unkown
|
page readonly
|
|
|
|
2658E200000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D69000
|
unkown
|
page readonly
|
|
|
|
21A09AAF000
|
unkown
|
page read and write
|
|
|
|
7FF533939000
|
unkown
|
page readonly
|
|
|
|
7EF8FAE000
|
unkown
|
page read and write
|
|
|
|
7FF5E92AB000
|
unkown
|
page readonly
|
|
|
|
7FF5A7C93000
|
unkown
|
page readonly
|
|
|
|
21A04441000
|
unkown
|
page read and write
|
|
|
|
7FF5E931C000
|
unkown
|
page readonly
|
|
|
|
7FF5338F0000
|
unkown
|
page readonly
|
|
|
|
7FF5338E5000
|
unkown
|
page readonly
|
|
|
|
2658CA10000
|
heap private
|
page read and write
|
|
|
|
7FF533920000
|
unkown
|
page readonly
|
|
|
|
A934AFD000
|
unkown
|
page read and write
|
|
|
|
21A04BC0000
|
unkown
|
page read and write
|
|
|
|
7FF5336CF000
|
unkown
|
page readonly
|
|
|
|
7FF5A79E3000
|
unkown
|
page readonly
|
|
|
|
21A09900000
|
unkown
|
page read and write
|
|
|
|
21A04429000
|
unkown
|
page read and write
|
|
|
|
21A04493000
|
unkown
|
page read and write
|
|
|
|
2658C880000
|
unkown
|
page read and write
|
|
|
|
7FF5E92E1000
|
unkown
|
page readonly
|
|
|
|
21A04D00000
|
unkown
|
page read and write
|
|
|
|
7FF53372F000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D5C000
|
unkown
|
page readonly
|
|
|
|
21A098F0000
|
unkown
|
page read and write
|
|
|
|
7FF53356B000
|
unkown
|
page readonly
|
|
|
|
2658C9D0000
|
unkown
|
page readonly
|
|
|
|
1DECD800000
|
unkown
|
page readonly
|
|
|
|
7FF5336F4000
|
unkown
|
page readonly
|
|
|
|
7FF533972000
|
unkown
|
page readonly
|
|
|
|
7FF5E92C4000
|
unkown
|
page readonly
|
|
|
|
2658CA55000
|
heap private
|
page read and write
|
|
|
|
7FF5E93A3000
|
unkown
|
page readonly
|
|
|
|
1DECD68A000
|
unkown
|
page read and write
|
|
|
|
21A09A11000
|
unkown
|
page read and write
|
|
|
|
7FF533574000
|
unkown
|
page readonly
|
|
|
|
7FF5A7DE6000
|
unkown
|
page readonly
|
|
|
|
7FF533915000
|
unkown
|
page readonly
|
|
|
|
7FF53379B000
|
unkown
|
page readonly
|
|
|
|
21A04370000
|
unkown
|
page read and write
|
|
|
|
21A0999C000
|
unkown
|
page write copy
|
|
|
|
7FF5E9030000
|
unkown
|
page readonly
|
|
|
|
1DECD5A0000
|
unkown
|
page readonly
|
|
|
|
7FF5339EC000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D14000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D06000
|
unkown
|
page readonly
|
|
|
|
21A098C8000
|
unkown
|
page read and write
|
|
|
|
21A04477000
|
unkown
|
page read and write
|
|
|
|
7EF98FF000
|
unkown
|
page read and write
|
|
|
|
21A04502000
|
unkown
|
page read and write
|
|
|
|
7FF53390F000
|
unkown
|
page readonly
|
|
|
|
7FF5E9326000
|
unkown
|
page readonly
|
|
|
|
A934C7C000
|
unkown
|
page read and write
|
|
|
|
21A052E0000
|
unkown
|
page read and write
|
|
There are 304 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://lobnet.org/tok/h63gwz2mqbo70kvt815cyspe4f9nxajrludi7de5wx0q6i4fs1hv2onz9urymlbjk3ca8tgp3a0io5tnzp1mxqvde92ufk87hrcwg4ly6jsb?data=ZXNjdWxsaW5AbnMxLmNvbQ==
|
|