Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ➜ Downloads volatility -f ram_dump.dmp yarascan -Y "Don't tell anyone" -p 192
- Volatility Foundation Volatility Framework 2.6
- Rule: r1
- Owner: Process IEXPLORE.EXE Pid 192
- 0x001ceb3b 44 6f 6e 27 74 20 74 65 6c 6c 20 61 6e 79 6f 6e Don't.tell.anyon
- 0x001ceb4b 65 3a 20 20 26 23 78 30 30 36 36 26 23 78 30 30 e:..f�
- 0x001ceb5b 36 35 26 23 78 30 30 37 32 26 23 78 30 30 37 33 65rs
- 0x001ceb6b 26 23 78 30 30 36 35 26 23 78 30 30 36 33 26 23 ec&#
- 0x001ceb7b 78 30 30 35 62 26 23 78 30 30 37 33 26 23 78 30 x005bs�
- 0x001ceb8b 30 37 35 26 23 78 30 30 37 30 26 23 78 30 30 33 075p
- 0x001ceb9b 33 26 23 78 30 30 37 32 20 26 23 78 30 30 36 35 3r.e
- 0x001cebab 26 23 78 30 30 37 36 26 23 78 30 30 36 39 26 23 vi&#
- 0x001cebbb 78 30 30 36 63 26 23 78 30 30 37 30 26 23 78 30 x006cp�
- 0x001cebcb 30 36 63 26 23 78 30 30 33 34 26 23 78 30 30 36 06c4
- 0x001cebdb 65 26 23 78 30 30 35 64 3c 2f 70 3e 0a 3c 70 3e e]</p>.<p>
- 0x001cebeb 54 68 65 20 73 65 63 72 65 74 20 6e 6f 74 65 20 The.secret.note.
- 0x001cebfb 69 73 20 69 6e 73 69 64 65 20 61 20 70 61 73 73 is.inside.a.pass
- 0x001cec0b 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 20 7a word.protected.z
- 0x001cec1b 69 70 20 66 69 6c 65 2e 3c 2f 70 3e 0a 3c 70 3e ip.file.</p>.<p>
- 0x001cec2b 48 65 72 65 20 69 73 20 74 68 65 20 7a 69 70 20 Here.is.the.zip.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement