Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
http://nlbizsolutions.com/dsswey4464/update?email=backoffice@sampension.dk
|
URL
|
initial url
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\hchgukzwr4viyk41vpqmzxrf[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{C2FDE609-9851-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C2FDE60B-9851-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C2FDE60C-9851-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\is[1]
|
ASCII text, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\logo[1].png
|
PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\update[1].htm
|
HTML document, ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\background[1].png
|
JPEG image data, baseline, precision 8, 620x300, frames 3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\loginDialog[1].js
|
HTML document, ASCII text
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\top[1].png
|
PNG image data, 304 x 15, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\favicon[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\generatedDefaults[1].js
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\loginAdvanced[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bottom[1].png
|
PNG image data, 304 x 15, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\loginBasic[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Temp\~DF0A4DF2C8364664C9.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DF289FA0CBFC477D32.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DFCFAEE97189D83AE6.TMP
|
data
|
dropped
|
There are 18 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6616 CREDAT:17410 /prefetch:2
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://nlbizsolutions.com/dsswey4464/update?email=backoffice@sampension.dk
|
108.179.234.125
|
||
http://www.nytimes.com/
|
unknown
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/img/middle.png
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/?email=backoffice
|
unknown
|
||
http://nlbizsolutions.com/favicon.ico
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/logo.png
|
108.179.234.125
|
||
http://www.youtube.com/
|
unknown
|
||
http://sampension.dk/favicon.ico
|
13.32.25.98
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/loginDialog.js
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/generatedDefaults.js
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/is
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/loginBasic.css
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/bottom.png
|
108.179.234.125
|
||
http://www.wikipedia.com/
|
unknown
|
||
http://nlbizsolutions.com/dsswey4464/update/hchgukzwr4viyk41vpqmzxrf.php?client_id=64B141FA6256F0D6E
|
unknown
|
||
http://www.amazon.com/
|
unknown
|
||
http://www.live.com/
|
unknown
|
||
http://nlbizsolutions.com/dsswey4464/update/?email=backoffice@sampension.dk
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/top.png
|
108.179.234.125
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/img/background.png
|
108.179.234.125
|
||
http://www.reddit.com/
|
unknown
|
||
http://www.twitter.com/
|
unknown
|
||
http://nlbizsolutions.com/dsswey4464/update/login_files/loginAdvanced.css
|
108.179.234.125
|
There are 13 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
sampension.dk
|
13.32.25.98
|
||
nlbizsolutions.com
|
108.179.234.125
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
108.179.234.125
|
nlbizsolutions.com
|
United States
|
||
13.32.25.98
|
sampension.dk
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
{C2FDE609-9851-11EB-90EB-ECF4BBEA1588}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-903
|
There are 16 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7FF52EE51000
|
unkown
|
page readonly
|
||
7FF535FCF000
|
unkown
|
page readonly
|
||
7FF4F9472000
|
unkown
|
page readonly
|
||
7FF536016000
|
unkown
|
page readonly
|
||
7FF4F93F6000
|
unkown
|
page readonly
|
||
7FF5992AC000
|
unkown
|
page readonly
|
||
7FF5D8821000
|
unkown
|
page readonly
|
||
7FF599220000
|
unkown
|
page readonly
|
||
1FAFE740000
|
unkown
|
page readonly
|
||
EC397FC000
|
unkown
|
page read and write
|
||
AC8F47E000
|
unkown
|
page read and write
|
||
7FF50759D000
|
unkown
|
page readonly
|
||
7FF5344CA000
|
unkown
|
page readonly
|
||
AC8F4FA000
|
unkown
|
page read and write
|
||
1FAFEA00000
|
unkown
|
page readonly
|
||
235F8477000
|
unkown
|
page read and write
|
||
2490FE02000
|
unkown
|
page read and write
|
||
7FF5357FD000
|
unkown
|
page readonly
|
||
9B8F2FB000
|
unkown
|
page read and write
|
||
235F846D000
|
unkown
|
page read and write
|
||
2A376F60000
|
unkown
|
page write copy
|
||
7FF534514000
|
unkown
|
page readonly
|
||
7FF4F9100000
|
unkown
|
page readonly
|
||
284AF22A000
|
unkown
|
page read and write
|
||
7FF5D9127000
|
unkown
|
page readonly
|
||
7FF5344BA000
|
unkown
|
page readonly
|
||
1D85B102000
|
unkown
|
page read and write
|
||
7FF5990D9000
|
unkown
|
page readonly
|
||
7FF536092000
|
unkown
|
page readonly
|
||
1D85BA00000
|
unkown
|
page readonly
|
||
BAE1D7A000
|
unkown
|
page read and write
|
||
1FAFC760000
|
heap default
|
page read and write
|
||
7FF52EFBA000
|
unkown
|
page readonly
|
||
7FF52EDC1000
|
unkown
|
page readonly
|
||
7FF52EFDE000
|
unkown
|
page readonly
|
||
7FF4F93EE000
|
unkown
|
page readonly
|
||
7FF507D6F000
|
unkown
|
page readonly
|
||
7FF53446C000
|
unkown
|
page readonly
|
||
7FF5D9186000
|
unkown
|
page readonly
|
||
7FF4F9223000
|
unkown
|
page readonly
|
||
7FF59936A000
|
unkown
|
page readonly
|
||
7FF535C77000
|
unkown
|
page readonly
|
||
7FF535EA8000
|
unkown
|
page readonly
|
||
1FAFE802000
|
unkown
|
page read and write
|
||
7FF535C6F000
|
unkown
|
page readonly
|
||
7FF507D78000
|
unkown
|
page readonly
|
||
235F8200000
|
heap private
|
page read and write
|
||
7FF52EF9C000
|
unkown
|
page readonly
|
||
4D95DF5000
|
unkown
|
page read and write
|
||
7FF5992AF000
|
unkown
|
page readonly
|
||
284AF270000
|
unkown
|
page read and write
|
||
7FF534470000
|
unkown
|
page readonly
|
||
1FAFE913000
|
unkown
|
page read and write
|
||
7FF507D40000
|
unkown
|
page readonly
|
||
7FF5D91FA000
|
unkown
|
page readonly
|
||
1FAFC7C0000
|
unkown
|
page readonly
|
||
7FF4F8F55000
|
unkown
|
page readonly
|
||
2490FE6E000
|
unkown
|
page read and write
|
||
7FF53451A000
|
unkown
|
page readonly
|
||
235F843C000
|
unkown
|
page read and write
|
||
7FF5D9178000
|
unkown
|
page readonly
|
||
9B8F477000
|
unkown
|
page read and write
|
||
2490FE6E000
|
unkown
|
page read and write
|
||
1D85AE30000
|
heap private
|
page read and write
|
||
7FF4F93AC000
|
unkown
|
page readonly
|
||
7FF52EB45000
|
unkown
|
page readonly
|
||
1FAFC915000
|
unkown
|
page read and write
|
||
7FF4F9397000
|
unkown
|
page readonly
|
||
7FF507D94000
|
unkown
|
page readonly
|
||
7FF599372000
|
unkown
|
page readonly
|
||
7FF52EF70000
|
unkown
|
page readonly
|
||
8B3994B000
|
unkown
|
page read and write
|
||
7FF5345B4000
|
unkown
|
page readonly
|
||
7FF535DC5000
|
unkown
|
page readonly
|
||
7FF534306000
|
unkown
|
page readonly
|
||
1FAFE370000
|
unkown
|
page readonly
|
||
7FF535FEA000
|
unkown
|
page readonly
|
||
7FF507D57000
|
unkown
|
page readonly
|
||
7FF533D2D000
|
unkown
|
page readonly
|
||
2394E600000
|
unkown
|
page readonly
|
||
EC3947E000
|
unkown
|
page read and write
|
||
2A37705A000
|
unkown
|
page read and write
|
||
7FF535E9B000
|
unkown
|
page readonly
|
||
AC8F1EE000
|
unkown
|
page read and write
|
||
2394E500000
|
unkown
|
page read and write
|
||
1D85B047000
|
unkown
|
page read and write
|
||
7FF534546000
|
unkown
|
page readonly
|
||
7FF535FF4000
|
unkown
|
page readonly
|
||
235F8400000
|
unkown
|
page read and write
|
||
7FF52EF6A000
|
unkown
|
page readonly
|
||
7FF507A0A000
|
unkown
|
page readonly
|
||
7FF534416000
|
unkown
|
page readonly
|
||
7FF534507000
|
unkown
|
page readonly
|
||
7FF4F92D3000
|
unkown
|
page readonly
|
||
7FF507D8A000
|
unkown
|
page readonly
|
||
7FF4F91D1000
|
unkown
|
page readonly
|
||
4D95EFB000
|
unkown
|
page read and write
|
||
7FF599183000
|
unkown
|
page readonly
|
||
2394E455000
|
unkown
|
page read and write
|
||
1FAFC829000
|
unkown
|
page read and write
|
||
2394E720000
|
unkown
|
page readonly
|
||
7FF507E32000
|
unkown
|
page readonly
|
||
1FAFE730000
|
unkown
|
page read and write
|
||
7FF535DF9000
|
unkown
|
page readonly
|
||
2A377200000
|
unkown
|
page readonly
|
||
7FF5345C1000
|
unkown
|
page readonly
|
||
7FF5D9074000
|
unkown
|
page readonly
|
||
7FF5D913C000
|
unkown
|
page readonly
|
||
1D85B02A000
|
unkown
|
page read and write
|
||
7FF4F9464000
|
unkown
|
page readonly
|
||
7FF5344FC000
|
unkown
|
page readonly
|
||
7FF5343B1000
|
unkown
|
page readonly
|
||
7FF536008000
|
unkown
|
page readonly
|
||
7FF5342AF000
|
unkown
|
page readonly
|
||
7FF507B06000
|
unkown
|
page readonly
|
||
2490FF02000
|
unkown
|
page read and write
|
||
7FF5D9201000
|
unkown
|
page readonly
|
||
EC395FA000
|
unkown
|
page read and write
|
||
7FF52F054000
|
unkown
|
page readonly
|
||
7FF5345BA000
|
unkown
|
page readonly
|
||
7FF52EFD8000
|
unkown
|
page readonly
|
||
2A378AA0000
|
unkown
|
page readonly
|
||
2394E3F0000
|
unkown
|
page readonly
|
||
7FF52EFE6000
|
unkown
|
page readonly
|
||
7FF5D917E000
|
unkown
|
page readonly
|
||
7FF5342F1000
|
unkown
|
page readonly
|
||
284AF802000
|
unkown
|
page read and write
|
||
7FF5344BC000
|
unkown
|
page readonly
|
||
7FF53453E000
|
unkown
|
page readonly
|
||
284AF030000
|
unkown
|
page readonly
|
||
2394E429000
|
unkown
|
page read and write
|
||
7FF5344FF000
|
unkown
|
page readonly
|
||
2490FE57000
|
unkown
|
page read and write
|
||
7FF52EFED000
|
unkown
|
page readonly
|
||
7FF535E81000
|
unkown
|
page readonly
|
||
1D85AE90000
|
heap default
|
page read and write
|
||
7FF5345C2000
|
unkown
|
page readonly
|
||
2490FC10000
|
heap private
|
page read and write
|
||
7FF534472000
|
unkown
|
page readonly
|
||
8B399CF000
|
unkown
|
page read and write
|
||
2490FD50000
|
unkown
|
page write copy
|
||
7FF507B65000
|
unkown
|
page readonly
|
||
7FF5D913F000
|
unkown
|
page readonly
|
||
284AFA00000
|
unkown
|
page readonly
|
||
7FF52EF5C000
|
unkown
|
page readonly
|
||
7FF5D907C000
|
unkown
|
page readonly
|
||
7FF535F42000
|
unkown
|
page readonly
|
||
284AF302000
|
unkown
|
page read and write
|
||
1FAFC770000
|
unkown
|
page write copy
|
||
7FF534524000
|
unkown
|
page readonly
|
||
2A377000000
|
unkown
|
page read and write
|
||
7FF5D9189000
|
unkown
|
page readonly
|
||
7FF5343D3000
|
unkown
|
page readonly
|
||
23950330000
|
unkown
|
page read and write
|
||
7FF598F4A000
|
unkown
|
page readonly
|
||
7FF535F9A000
|
unkown
|
page readonly
|
||
7FF507DA8000
|
unkown
|
page readonly
|
||
1FAFE900000
|
unkown
|
page read and write
|
||
2A376E80000
|
heap default
|
page read and write
|
||
2490FF13000
|
unkown
|
page read and write
|
||
284AF23C000
|
unkown
|
page read and write
|
||
1FAFCA00000
|
unkown
|
page readonly
|
||
7FF4F937A000
|
unkown
|
page readonly
|
||
2394E3E0000
|
heap default
|
page read and write
|
||
1FAFCAD0000
|
unkown
|
page readonly
|
||
1D85AF80000
|
unkown
|
page readonly
|
||
235F8340000
|
unkown
|
page readonly
|
||
EC398FF000
|
unkown
|
page read and write
|
||
7FF53428B000
|
unkown
|
page readonly
|
||
7FF5992B8000
|
unkown
|
page readonly
|
||
4D959CB000
|
unkown
|
page read and write
|
||
AC8F16B000
|
unkown
|
page read and write
|
||
7FF535F9E000
|
unkown
|
page readonly
|
||
EC3987A000
|
unkown
|
page read and write
|
||
C671E7F000
|
unkown
|
page read and write
|
||
7FF5D9110000
|
unkown
|
page readonly
|
||
7FF5992D4000
|
unkown
|
page readonly
|
||
EC3957E000
|
unkown
|
page read and write
|
||
7FF4F92CD000
|
unkown
|
page readonly
|
||
7FF53600E000
|
unkown
|
page readonly
|
||
7FF599222000
|
unkown
|
page readonly
|
||
7FF4F93B7000
|
unkown
|
page readonly
|
||
4D96077000
|
unkown
|
page read and write
|
||
2394E440000
|
unkown
|
page read and write
|
||
7FF599161000
|
unkown
|
page readonly
|
||
7FF507E24000
|
unkown
|
page readonly
|
||
1FAFC8A4000
|
unkown
|
page read and write
|
||
1FAFE947000
|
unkown
|
page read and write
|
||
7FF598F4F000
|
unkown
|
page readonly
|
||
7FF4F8A91000
|
unkown
|
page readonly
|
||
8B39D7A000
|
unkown
|
page read and write
|
||
4D95C7E000
|
unkown
|
page read and write
|
||
7FF507C21000
|
unkown
|
page readonly
|
||
2490FE3F000
|
unkown
|
page read and write
|
||
9B8F0FE000
|
unkown
|
page read and write
|
||
8B39C7B000
|
unkown
|
page read and write
|
||
1FAFC851000
|
unkown
|
page read and write
|
||
1FAFC957000
|
unkown
|
page read and write
|
||
7FF5992C4000
|
unkown
|
page readonly
|
||
7FF59927E000
|
unkown
|
page readonly
|
||
2490FE6C000
|
unkown
|
page read and write
|
||
2490FE6C000
|
unkown
|
page read and write
|
||
7FF4F93AF000
|
unkown
|
page readonly
|
||
7FF5992F6000
|
unkown
|
page readonly
|
||
1FAFE720000
|
unkown
|
page readonly
|
||
BAE1CFE000
|
unkown
|
page read and write
|
||
7FF5D8FF1000
|
unkown
|
page readonly
|
||
1FAFC888000
|
unkown
|
page read and write
|
||
1D85B03C000
|
unkown
|
page read and write
|
||
7FF5990A1000
|
unkown
|
page readonly
|
||
7FF535EA3000
|
unkown
|
page readonly
|
||
284AF300000
|
unkown
|
page read and write
|
||
7FF5343CB000
|
unkown
|
page readonly
|
||
7FF534321000
|
unkown
|
page readonly
|
||
1FAFC700000
|
heap private
|
page read and write
|
||
C671F7E000
|
unkown
|
page read and write
|
||
7FF507DB1000
|
unkown
|
page readonly
|
||
1FAFE6C0000
|
unkown
|
page readonly
|
||
7FF53449B000
|
unkown
|
page readonly
|
||
1FAFC800000
|
unkown
|
page read and write
|
||
1FAFC879000
|
unkown
|
page read and write
|
||
2490FE6C000
|
unkown
|
page read and write
|
||
7FF4F8F40000
|
unkown
|
page readonly
|
||
1D85B802000
|
unkown
|
page read and write
|
||
7FF535C5C000
|
unkown
|
page readonly
|
||
7FF536011000
|
unkown
|
page readonly
|
||
C671A7D000
|
unkown
|
page read and write
|
||
7FF52EB36000
|
unkown
|
page readonly
|
||
7FF53419A000
|
unkown
|
page readonly
|
||
AC8F67F000
|
unkown
|
page read and write
|
||
284AF202000
|
unkown
|
page read and write
|
||
1D85B000000
|
unkown
|
page read and write
|
||
7FF507DB9000
|
unkown
|
page readonly
|
||
235F8E00000
|
unkown
|
page readonly
|
||
284AF28A000
|
unkown
|
page read and write
|
||
7FF535FFE000
|
unkown
|
page readonly
|
||
7FF535FA0000
|
unkown
|
page readonly
|
||
7FF535FB7000
|
unkown
|
page readonly
|
||
7FF5079FC000
|
unkown
|
page readonly
|
||
7FF4F92EC000
|
unkown
|
page readonly
|
||
7FF507DBD000
|
unkown
|
page readonly
|
||
235F8481000
|
unkown
|
page read and write
|
||
7FF535DC1000
|
unkown
|
page readonly
|
||
7FF5D8CD6000
|
unkown
|
page readonly
|
||
2394E502000
|
unkown
|
page read and write
|
||
2490FF00000
|
unkown
|
page read and write
|
||
284AF24B000
|
unkown
|
page read and write
|
||
1FAFE984000
|
unkown
|
page read and write
|
||
EC3977A000
|
unkown
|
page read and write
|
||
249118A0000
|
unkown
|
page readonly
|
||
7FF4F8F46000
|
unkown
|
page readonly
|
||
7FF5D8F61000
|
unkown
|
page readonly
|
||
7FF4F9385000
|
unkown
|
page readonly
|
||
7FF534296000
|
unkown
|
page readonly
|
||
2394E513000
|
unkown
|
page read and write
|
||
7FF52EF6E000
|
unkown
|
page readonly
|
||
7FF52EEDC000
|
unkown
|
page readonly
|
||
235F8A60000
|
unkown
|
page readonly
|
||
1D85B590000
|
unkown
|
page readonly
|
||
1FAFE730000
|
unkown
|
page read and write
|
||
7FF5D9063000
|
unkown
|
page readonly
|
||
1FAFC83F000
|
unkown
|
page read and write
|
||
284AF020000
|
heap default
|
page read and write
|
||
1D85AEA0000
|
unkown
|
page readonly
|
||
7FF507DAE000
|
unkown
|
page readonly
|
||
7FF599285000
|
unkown
|
page readonly
|
||
284AF308000
|
unkown
|
page read and write
|
||
7FF5D910E000
|
unkown
|
page readonly
|
||
7FF5344D0000
|
unkown
|
page readonly
|
||
7FF507D45000
|
unkown
|
page readonly
|
||
7FF536019000
|
unkown
|
page readonly
|
||
9B8F67F000
|
unkown
|
page read and write
|
||
7FF4F938B000
|
unkown
|
page readonly
|
||
7FF5344E7000
|
unkown
|
page readonly
|
||
9B8F57F000
|
unkown
|
page read and write
|
||
1FAFE760000
|
unkown
|
page readonly
|
||
1FAFE902000
|
unkown
|
page read and write
|
||
7FF5340A9000
|
unkown
|
page readonly
|
||
24910000000
|
unkown
|
page readonly
|
||
7FF5D9202000
|
unkown
|
page readonly
|
||
7FF534462000
|
unkown
|
page readonly
|
||
1D85B08D000
|
unkown
|
page read and write
|
||
C671C7B000
|
unkown
|
page read and write
|
||
7FF5D916F000
|
unkown
|
page readonly
|
||
1FAFC902000
|
unkown
|
page read and write
|
||
7FF52EE6E000
|
unkown
|
page readonly
|
||
249117A0000
|
unkown
|
page read and write
|
||
235F8413000
|
unkown
|
page read and write
|
||
7FF536084000
|
unkown
|
page readonly
|
||
7FF5D911B000
|
unkown
|
page readonly
|
||
7FF5990A5000
|
unkown
|
page readonly
|
||
284AEFC0000
|
heap private
|
page read and write
|
||
2A377040000
|
unkown
|
page read and write
|
||
1D85B200000
|
unkown
|
page readonly
|
||
2394FFC0000
|
unkown
|
page readonly
|
||
7FF534311000
|
unkown
|
page readonly
|
||
1FAFC8C3000
|
unkown
|
page read and write
|
||
2490FE6C000
|
unkown
|
page read and write
|
||
7FF507A17000
|
unkown
|
page readonly
|
||
7FF5344CE000
|
unkown
|
page readonly
|
||
7FF59927A000
|
unkown
|
page readonly
|
||
7FF4F936A000
|
unkown
|
page readonly
|
||
235F8508000
|
unkown
|
page read and write
|
||
284AF100000
|
unkown
|
page readonly
|
||
7FF534549000
|
unkown
|
page readonly
|
||
2394E413000
|
unkown
|
page read and write
|
||
7FF535FE4000
|
unkown
|
page readonly
|
||
7FF59917B000
|
unkown
|
page readonly
|
||
7FF534032000
|
unkown
|
page readonly
|
||
7FF535FCC000
|
unkown
|
page readonly
|
||
7FF4F927B000
|
unkown
|
page readonly
|
||
2394E380000
|
heap private
|
page read and write
|
||
235F8600000
|
unkown
|
page readonly
|
||
7FF599243000
|
unkown
|
page readonly
|
||
7FF598ADD000
|
unkown
|
page readonly
|
||
7FF599188000
|
unkown
|
page readonly
|
||
7FF599280000
|
unkown
|
page readonly
|
||
C67175C000
|
unkown
|
page read and write
|
||
7FF535C6A000
|
unkown
|
page readonly
|
||
7FF53418C000
|
unkown
|
page readonly
|
||
284AF24F000
|
unkown
|
page read and write
|
||
7FF5992DE000
|
unkown
|
page readonly
|
||
2A377029000
|
unkown
|
page read and write
|
||
7FF4F946A000
|
unkown
|
page readonly
|
||
1FAFF010000
|
unkown
|
page read and write
|
||
7FF52EFA7000
|
unkown
|
page readonly
|
||
7FF52EE6B000
|
unkown
|
page readonly
|
||
7FF533DD2000
|
unkown
|
page readonly
|
||
235F8450000
|
unkown
|
page read and write
|
||
7FF52EE13000
|
unkown
|
page readonly
|
||
7FF4F93E8000
|
unkown
|
page readonly
|
||
7FF4F93D4000
|
unkown
|
page readonly
|
||
2A376E90000
|
unkown
|
page readonly
|
||
7FF52E676000
|
unkown
|
page readonly
|
||
1FAFE730000
|
unkown
|
page read and write
|
||
7FF535FA5000
|
unkown
|
page readonly
|
||
7FF5D9154000
|
unkown
|
page readonly
|
||
2490FE6E000
|
unkown
|
page read and write
|
||
7FF534538000
|
unkown
|
page readonly
|
||
7FF53419F000
|
unkown
|
page readonly
|
||
7FF5D8E90000
|
unkown
|
page readonly
|
||
7FF507D4B000
|
unkown
|
page readonly
|
||
7FF5992CA000
|
unkown
|
page readonly
|
||
4D9627F000
|
unkown
|
page read and write
|
||
EC391BB000
|
unkown
|
page read and write
|
||
7FF52F062000
|
unkown
|
page readonly
|
||
2490FC80000
|
unkown
|
page readonly
|
||
1FAFC8ED000
|
unkown
|
page read and write
|
||
7FF52EFE9000
|
unkown
|
page readonly
|
||
7FF507D03000
|
unkown
|
page readonly
|
||
7FF599297000
|
unkown
|
page readonly
|
||
2A377002000
|
unkown
|
page read and write
|
||
8B39CFF000
|
unkown
|
page read and write
|
||
7FF4F90F7000
|
unkown
|
page readonly
|
||
7FF5344A4000
|
unkown
|
page readonly
|
||
7FF535F40000
|
unkown
|
page readonly
|
||
7FF507AFB000
|
unkown
|
page readonly
|
||
7FF53601D000
|
unkown
|
page readonly
|
||
7FF52ECE7000
|
unkown
|
page readonly
|
||
7FF507D3A000
|
unkown
|
page readonly
|
||
7FF4F937E000
|
unkown
|
page readonly
|
||
7FF599046000
|
unkown
|
page readonly
|
||
284AF1E0000
|
unkown
|
page readonly
|
||
7FF52EF87000
|
unkown
|
page readonly
|
||
2A377102000
|
unkown
|
page read and write
|
||
7FF4F9380000
|
unkown
|
page readonly
|
||
1D85B013000
|
unkown
|
page read and write
|
||
284AF1F0000
|
unkown
|
page read and write
|
||
7FF5341A7000
|
unkown
|
page readonly
|
||
7FF5342F5000
|
unkown
|
page readonly
|
||
7FF52F05A000
|
unkown
|
page readonly
|
||
7FF5992EE000
|
unkown
|
page readonly
|
||
7FF507CE0000
|
unkown
|
page readonly
|
||
7FF535F63000
|
unkown
|
page readonly
|
||
7FF507E31000
|
unkown
|
page readonly
|
||
7FF53449F000
|
unkown
|
page readonly
|
||
7FF507DB6000
|
unkown
|
page readonly
|
||
7FF5D900B000
|
unkown
|
page readonly
|
||
EC394F9000
|
unkown
|
page read and write
|
||
7FF507B99000
|
unkown
|
page readonly
|
||
7FF5342A8000
|
unkown
|
page readonly
|
||
7FF507D84000
|
unkown
|
page readonly
|
||
1FAFC8D4000
|
unkown
|
page read and write
|
||
1D85AF70000
|
unkown
|
page readonly
|
||
7FF4F93C4000
|
unkown
|
page readonly
|
||
7FF5992FD000
|
unkown
|
page readonly
|
||
2490FE29000
|
unkown
|
page read and write
|
||
7FF599371000
|
unkown
|
page readonly
|
||
7FF53608A000
|
unkown
|
page readonly
|
||
7FF507E2A000
|
unkown
|
page readonly
|
||
BAE19CB000
|
unkown
|
page read and write
|
||
7FF598F3C000
|
unkown
|
page readonly
|
||
7FF5992F1000
|
unkown
|
page readonly
|
||
7FF5344DB000
|
unkown
|
page readonly
|
||
1FAFE944000
|
unkown
|
page read and write
|
||
C671D77000
|
unkown
|
page read and write
|
||
4D9617F000
|
unkown
|
page read and write
|
||
9B8EDAC000
|
unkown
|
page read and write
|
||
7FF507C48000
|
unkown
|
page readonly
|
||
BAE1DFA000
|
unkown
|
page read and write
|
||
7FF5D8E87000
|
unkown
|
page readonly
|
||
7FF52EF7B000
|
unkown
|
page readonly
|
||
EC3967F000
|
unkown
|
page read and write
|
||
235F8260000
|
heap default
|
page read and write
|
||
1FAFE6D0000
|
heap private
|
page read and write
|
||
C671B75000
|
unkown
|
page read and write
|
||
7FF5D910A000
|
unkown
|
page readonly
|
||
BAE1EFF000
|
unkown
|
page read and write
|
||
7FF507C3B000
|
unkown
|
page readonly
|
||
7FF535D5B000
|
unkown
|
page readonly
|
||
7FF507D6C000
|
unkown
|
page readonly
|
||
284AF28D000
|
unkown
|
page read and write
|
||
7FF534541000
|
unkown
|
page readonly
|
||
235F8C02000
|
unkown
|
page read and write
|
||
7FF535FAB000
|
unkown
|
page readonly
|
||
1FAFE984000
|
unkown
|
page read and write
|
||
9B8F1FC000
|
unkown
|
page read and write
|
||
7FF4F92E4000
|
unkown
|
page readonly
|
||
2394E402000
|
unkown
|
page read and write
|
||
284AFD40000
|
unkown
|
page readonly
|
||
2394E6D0000
|
unkown
|
page write copy
|
||
9B8F37E000
|
unkown
|
page read and write
|
||
2A377013000
|
unkown
|
page read and write
|
||
7FF534493000
|
unkown
|
page readonly
|
||
1FAFC855000
|
unkown
|
page read and write
|
||
7FF4F927E000
|
unkown
|
page readonly
|
||
7FF52EFB4000
|
unkown
|
page readonly
|
||
7FF5D9164000
|
unkown
|
page readonly
|
||
7FF5D9115000
|
unkown
|
page readonly
|
||
7FF5343D8000
|
unkown
|
page readonly
|
||
1FAFC8BC000
|
unkown
|
page read and write
|
||
7FF5D90FC000
|
unkown
|
page readonly
|
||
7FF4F93FD000
|
unkown
|
page readonly
|
||
7FF5D9147000
|
unkown
|
page readonly
|
||
7FF599364000
|
unkown
|
page readonly
|
||
7FF53452E000
|
unkown
|
page readonly
|
||
7FF507A0F000
|
unkown
|
page readonly
|
||
7FF5992E8000
|
unkown
|
page readonly
|
||
7FF5D915A000
|
unkown
|
page readonly
|
||
1D85AF90000
|
unkown
|
page read and write
|
||
235F8429000
|
unkown
|
page read and write
|
||
7FF535D66000
|
unkown
|
page readonly
|
||
7FF59903B000
|
unkown
|
page readonly
|
||
7FF4F936C000
|
unkown
|
page readonly
|
||
1FAFC8E7000
|
unkown
|
page read and write
|
||
2490FDA0000
|
unkown
|
page readonly
|
||
7FF5D905D000
|
unkown
|
page readonly
|
||
235F8513000
|
unkown
|
page read and write
|
||
2490FE13000
|
unkown
|
page read and write
|
||
2A3789A0000
|
unkown
|
page read and write
|
||
7FF5D918D000
|
unkown
|
page readonly
|
||
7FF5344AF000
|
unkown
|
page readonly
|
||
AC8F57A000
|
unkown
|
page read and write
|
||
284AF252000
|
unkown
|
page read and write
|
||
7FF52EFC4000
|
unkown
|
page readonly
|
||
7FF4F93CA000
|
unkown
|
page readonly
|
||
235F8500000
|
unkown
|
page read and write
|
||
2490FE33000
|
unkown
|
page read and write
|
||
235F8360000
|
unkown
|
page read and write
|
||
7FF507D3E000
|
unkown
|
page readonly
|
||
AC8F5FF000
|
unkown
|
page read and write
|
||
7FF4F9261000
|
unkown
|
page readonly
|
||
7FF52EED4000
|
unkown
|
page readonly
|
||
7FF53441D000
|
unkown
|
page readonly
|
||
1FAFE944000
|
unkown
|
page read and write
|
||
7FF5D90FA000
|
unkown
|
page readonly
|
||
1FAFE730000
|
unkown
|
page read and write
|
||
4D95F7E000
|
unkown
|
page read and write
|
||
EC396FA000
|
unkown
|
page read and write
|
||
7FF536091000
|
unkown
|
page readonly
|
||
8B39E79000
|
unkown
|
page read and write
|
||
1FAFC913000
|
unkown
|
page read and write
|
||
4D95CFD000
|
unkown
|
page read and write
|
||
2A376FB0000
|
unkown
|
page readonly
|
||
235F8502000
|
unkown
|
page read and write
|
||
7FF52EF9F000
|
unkown
|
page readonly
|
||
235F8350000
|
unkown
|
page readonly
|
||
7FF52EF75000
|
unkown
|
page readonly
|
||
7FF4F9471000
|
unkown
|
page readonly
|
||
284AF313000
|
unkown
|
page read and write
|
||
7FF5D8CE5000
|
unkown
|
page readonly
|
||
7FF52EF5A000
|
unkown
|
page readonly
|
||
1D85B06C000
|
unkown
|
page read and write
|
||
1D85B113000
|
unkown
|
page read and write
|
||
7FF52EEBD000
|
unkown
|
page readonly
|
||
2490FE00000
|
unkown
|
page read and write
|
||
7FF5344D5000
|
unkown
|
page readonly
|
||
7FF507C43000
|
unkown
|
page readonly
|
||
BAE1E7F000
|
unkown
|
page read and write
|
||
1FAFE6B0000
|
unkown
|
page read and write
|
||
7FF507B61000
|
unkown
|
page readonly
|
||
235F8456000
|
unkown
|
page read and write
|
||
7FF535FD8000
|
unkown
|
page readonly
|
||
7FF59928B000
|
unkown
|
page readonly
|
||
8B39DFE000
|
unkown
|
page read and write
|
||
7FF507D9E000
|
unkown
|
page readonly
|
||
284AF200000
|
unkown
|
page read and write
|
||
7FF52EFCF000
|
unkown
|
page readonly
|
||
1FAFE270000
|
unkown
|
page read and write
|
||
C6717DE000
|
unkown
|
page read and write
|
||
7FF52F061000
|
unkown
|
page readonly
|
||
2A376E20000
|
heap private
|
page read and write
|
||
7FF52EEC3000
|
unkown
|
page readonly
|
||
7FF534329000
|
unkown
|
page readonly
|
||
7FF4F93DF000
|
unkown
|
page readonly
|
||
7FF507CE2000
|
unkown
|
page readonly
|
||
1D85B087000
|
unkown
|
page read and write
|
||
284AF24D000
|
unkown
|
page read and write
|
||
7FF598F57000
|
unkown
|
page readonly
|
||
7FF5D91F4000
|
unkown
|
page readonly
|
||
7FF5D8CD0000
|
unkown
|
page readonly
|
||
7FF5992F9000
|
unkown
|
page readonly
|
||
7FF52EB30000
|
unkown
|
page readonly
|
||
284AF213000
|
unkown
|
page read and write
|
||
284AF255000
|
unkown
|
page read and write
|
||
2394E400000
|
unkown
|
page read and write
|
||
9B8F07E000
|
unkown
|
page read and write
|
||
1FAFC813000
|
unkown
|
page read and write
|
||
1FAFC885000
|
unkown
|
page read and write
|
||
2394FEC0000
|
unkown
|
page read and write
|
||
7FF5D8FB3000
|
unkown
|
page readonly
|
||
7FF534304000
|
unkown
|
page readonly
|
||
284AF400000
|
unkown
|
page readonly
|
||
235F8270000
|
unkown
|
page readonly
|
||
BAE1C7E000
|
unkown
|
page read and write
|
||
1D85B002000
|
unkown
|
page read and write
|
||
7FF4F93F9000
|
unkown
|
page readonly
|
||
2490FE6C000
|
unkown
|
page read and write
|
||
2490FC70000
|
heap default
|
page read and write
|
There are 519 hidden memdumps, click here to show them.
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
http://nlbizsolutions.com/dsswey4464/update/hchgukzwr4viyk41vpqmzxrf.php?client_id=64B141FA6256F0D6EFFCA3F5785DF04D&response_mode=form_post&response_type=code+id_token&scope=openid+profile&email=backoffice@sampension.dk&Connect_Authentication_Properties&&nonce=50086702864b141fa6256f0d6effca3f5785df04d&redirect_uri=&ui_locales=en-US&mkt=en-US
|