Analysis Overview
SHA256
5ce530ab5407bcd9dd3d8f0381227d62c3e3c0eb64e13ecd55088f5f47bdaf0e
Threat Level: Shows suspicious behavior
The file ServerHosting.exe was found to be: Shows suspicious behavior.
Malicious Activity Summary
Reads data files stored by FTP clients
Reads user/profile data of web browsers
Unsecured Credentials: Credentials In Files
Adds Run key to start application
Legitimate hosting services abused for malware hosting/C2
Unsigned PE
Suspicious use of AdjustPrivilegeToken
Suspicious use of SetWindowsHookEx
Suspicious behavior: EnumeratesProcesses
Suspicious use of FindShellTrayWindow
Suspicious behavior: GetForegroundWindowSpam
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2025-01-15 22:04
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2025-01-15 22:04
Reported
2025-01-15 22:19
Platform
win10ltsc2021-20250113-en
Max time kernel
898s
Max time network
892s
Command Line
Signatures
Reads data files stored by FTP clients
Reads user/profile data of web browsers
Unsecured Credentials: Credentials In Files
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3406519639-3774642266-3926631722-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ServerHosting = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ServerHosting.exe" | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
| N/A | 8.tcp.ngrok.io | N/A | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe
"C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 22.160.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 167.173.78.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 166.81.142.3.in-addr.arpa | udp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 53.210.109.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | fd.api.iris.microsoft.com | udp |
| IE | 20.223.35.26:443 | fd.api.iris.microsoft.com | tcp |
| US | 8.8.8.8:53 | 241.42.69.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 54.167.142.3.in-addr.arpa | udp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 20.49.80.91.in-addr.arpa | udp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 14.227.111.52.in-addr.arpa | udp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.54:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 43.130.19.3.in-addr.arpa | udp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 9.173.189.20.in-addr.arpa | udp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 220.157.58.13.in-addr.arpa | udp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 4.167.142.3.in-addr.arpa | udp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.19.130.43:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.167.4:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 13.58.157.220:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 3.142.81.166:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 8.tcp.ngrok.io | udp |
| US | 3.142.129.56:18229 | 8.tcp.ngrok.io | tcp |
| US | 8.8.8.8:53 | 56.129.142.3.in-addr.arpa | udp |
Files
memory/5092-0-0x00007FFDD2015000-0x00007FFDD2016000-memory.dmp
memory/5092-1-0x000000001B8A0000-0x000000001B946000-memory.dmp
memory/5092-2-0x00007FFDD1D60000-0x00007FFDD2701000-memory.dmp
memory/5092-3-0x000000001BE90000-0x000000001C35E000-memory.dmp
memory/5092-4-0x000000001C420000-0x000000001C4BC000-memory.dmp
memory/5092-5-0x00007FFDD1D60000-0x00007FFDD2701000-memory.dmp
memory/5092-6-0x00000000012C0000-0x00000000012C8000-memory.dmp
memory/5092-7-0x000000001C580000-0x000000001C5CC000-memory.dmp
memory/5092-8-0x000000001F210000-0x000000001F520000-memory.dmp
memory/5092-9-0x00007FFDD1D60000-0x00007FFDD2701000-memory.dmp
memory/5092-10-0x00007FFDD2015000-0x00007FFDD2016000-memory.dmp
memory/5092-11-0x00007FFDD1D60000-0x00007FFDD2701000-memory.dmp
memory/5092-12-0x00007FFDD1D60000-0x00007FFDD2701000-memory.dmp
memory/5092-13-0x00007FFDD1D60000-0x00007FFDD2701000-memory.dmp