"iexplore.exe" wrote bytes "c03a3d6a" to virtual address "0x75EF1FB0" (part of module "SHEL元2.DLL") "iexplore.exe" wrote bytes "b0333d6a" to virtual address "0x76BF14E0" (part of module "USER32.DLL") "iexplore.exe" wrote bytes "b0333d6a" to virtual address "0x77081210" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "60d2406a" to virtual address "0圆DD1FEC4" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60d2406a" to virtual address "0x75EF1D7C" (part of module "SHEL元2.DLL") "iexplore.exe" wrote bytes "60cd406a" to virtual address "0圆DD1FEC0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "c03a3d6a" to virtual address "0圆DD1FE80" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b0333d6a" to virtual address "0x75B511BC" (part of module "GDI32.DLL") "iexplore.exe" wrote bytes "b0333d6a" to virtual address "0x776C1164" (part of module "USP10.DLL") "iexplore.exe" wrote bytes "a0353d6a" to virtual address "0x76CC1144" (part of module "LPK.DLL")
"iexplore.exe" wrote bytes "c0bf3e6a" to virtual address "0x75EF1F68" (part of module "SHEL元2.DLL") "iexplore.exe" wrote bytes "b0333d6a" to virtual address "0x76F9917C" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "a0353d6a" to virtual address "0x75EF202C" (part of module "SHEL元2.DLL") "iexplore.exe" wrote bytes "30303d6a" to virtual address "0圆DD1FE90" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60d2406a" to virtual address "0x76B913B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "b0333d6a" to virtual address "0x76B911B8" (part of module "SHLWAPI.DLL")
"_C030BB5D-43FA-11EB-88DC-0800279CE9B8_.dat" has type "Composite Document File V2 Document Cannot read section info" "http_403_2_" has type "HTML document UTF-8 Unicode (with BOM) text with CRLF line terminators" "http_403_1_" has type "HTML document UTF-8 Unicode (with BOM) text with CRLF line terminators" "favicon_3_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced"
"bullet_1_" has type "PNG image data 15 x 15 8-bit colormap non-interlaced" "background_gradient_1_" has type "JPEG image data JFIF standard 1.02 aspect ratio density 100x100 segment length 16 baseline precision 8 1x800 frames 3" "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4795 bytes 1 file" "favicon_2_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced" Sends traffic on typical HTTP outbound port, but without HTTP headerįound malicious artifacts related to "104.153.233.177". Installs hooks/patches the running processĪdversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend with normal network activity to avoid more detailed inspection. Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources.
0 kommentar(er)
