IOC Report
SumatraPDF-3.5.2-64.exe

loading gif

Files

File Path
Type
Category
Malicious
SumatraPDF-3.5.2-64.exe
PE32+ executable (GUI) x86-64, for MS Windows
initial sample
C:\Users\user\Desktop\SumatraPDF-settings.txt
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\SumatraPDF-3.5.2-64.exe
"C:\Users\user\Desktop\SumatraPDF-3.5.2-64.exe"

URLs

Name
IP
Malicious
http://www.idpf.org/2007/opf
unknown
https://github.com/sumatrapdfreader/sumatrapdf/commit/%s)
unknown
http://www.idpf.org/2007/opfapplication/xhtml
unknown
https://www.sumatrapdfreader.org/settings/settings3-5-1.html8.33
unknown
https://www.sumatrapdfreader.org/docs/Submit-crash-report.htmlShowCrashHandlerMessage:
unknown
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd
unknown
https://www.google.com/search?q=$
unknown
https://www.sumatrapdfreader.org/manualArialwebsiteArial
unknown
http://docs.oasis-open.org/ns/office/1.2/meta/pkg#
unknown
https://github.com/sumatrapdfreader/sumatrapdf/discussions/2316
unknown
https://github.com/sumatrapdfreader/sumatrapdf/discussionsSumatraPDF
unknown
https://github.com/sumatrapdfreader/sumatrapdf/commit/646d1feddcc80b3b51072c5b27a1446487904175)
unknown
http://docs.oasis-open.org/ns/office/1.2/meta/pkg#Document
unknown
https://www.sumatrapdfreader.org/download-free-pdf-viewer-------------
unknown
http://docs.oasis-open.org/ns/office/1.2/meta/odf#ContentFile
unknown
https://github.com/sumatrapdfreader/sumatrapdf/discussions
unknown
https://www.sumatrapdfreader.org/settings/settings3-5-1.html
unknown
https://github.com/sumatrapdfreader/sumatrapdf/blob/master/AUTHORShttps://github.com/sumatrapdfreade
unknown
http://docs.oasis-open.org/ns/office/1.2/meta/odf#StylesFile
unknown
https://www.sumatrapdfreader.org/update-check-rel.txt
unknown
https://www.sumatrapdfreader.org/docs/Installer-cmd-line-arguments
unknown
http://www.gribuser.ru/xml/fictionbook/2.0
unknown
https://github.com/sumatrapdfreader/sumatrapdf/blob/master/AUTHORS
unknown
https://www.sumatrapdfreader.org/docs/Contribute-translation
unknown
https://www.sumatrapdfreader.org/dl/rel/SumatraPDF-3.5.2
unknown
https://www.sumatrapdfreader.org/
unknown
https://www.sumatrapdfreader.org/dl/rel/SumatraPDF-3.5.2-64.pdb.lzsa
unknown
https://www.sumatrapdfreader.org/dl/prerel/PRE_RELEASE_VER/SumatraPDF-prerel
unknown
https://sumatra-website.onrender.com/update-check-rel.txtInstaller64LatestInstaller32InstallerArm64P
unknown
https://www.sumatrapdfreader.org/update-check-rel.txtnotifUpdateCheckInProgress
unknown
https://github.com/sumatrapdfreader/sumatrapdf/commit/646d1feddcc80b3b51072c5b27a1446487904175
unknown
https://www.sumatrapdfreader.org/docs/Corrupted-installation
unknown
https://www.sumatrapdfreader.org/docs/Keyboard-shortcuts
unknown
https://www.sumatrapdfreader.org/docs/Keyboard-shortcutssumatrapdfrestrict.inihttps://www.sumatrapdf
unknown
https://www.sumatrapdfreader.org/docs/Submit-crash-report.html
unknown
https://://https://translate.google.com/?op=translate&sl=auto&tl=$
unknown
https://github.com/sumatrapdfreader/sumatrapdf/blob/master/TRANSLATORS
unknown
https://www.sumatrapdfreader.org/dl/rel/SumatraPDF-3.5.2-64.pdb.lzsa%
unknown
https://sumatra-website.onrender.com/update-check-rel.txt
unknown
https://www.sumatrapdfreader.org/docs/Version-history.html
unknown
https://www.sumatrapdfreader.org/URLUpdateInfohttps://www.sumatrapdfreader.org/docs/Version-history.
unknown
http://www.daisy.org/z3986/2005/ncx/
unknown
https://www.deepl.com/translator#-/$
unknown
https://www.sumatrapdfreader.org/manual
unknown
https://www.sumatrapdfreader.org/download-free-pdf-viewer
unknown
There are 35 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
FontCachePath

Memdumps

Base Address
Regiontype
Protect
Malicious
487000
heap
page read and write
5DDF000
heap
page read and write
4B6B000
heap
page read and write
3981000
heap
page read and write
27CF000
heap
page read and write
140A19000
unkown
page write copy
2338000
heap
page read and write
5220000
heap
page read and write
2301000
heap
page read and write
54B1000
heap
page read and write
27A6000
heap
page read and write
236C000
heap
page read and write
52A9000
heap
page read and write
4D23000
heap
page read and write
238B000
heap
page read and write
140A06000
unkown
page write copy
52A0000
heap
page read and write
4DBF000
heap
page read and write
59E5000
heap
page read and write
4BE3000
heap
page read and write
4B20000
heap
page read and write
140A8F000
unkown
page readonly
4EF6000
heap
page read and write
2386000
heap
page read and write
4CE0000
heap
page read and write
13FBE0000
unkown
page readonly
27A6000
heap
page read and write
38B0000
heap
page read and write
5265000
heap
page read and write
5577000
heap
page read and write
4DE8000
heap
page read and write
24A0000
heap
page read and write
548A000
heap
page read and write
513F000
heap
page read and write
54FA000
heap
page read and write
4D80000
heap
page read and write
2386000
heap
page read and write
597C000
heap
page read and write
5227000
heap
page read and write
4E7A000
heap
page read and write
27CF000
heap
page read and write
557C000
heap
page read and write
553D000
heap
page read and write
3983000
heap
page read and write
27AE000
heap
page read and write
54AB000
heap
page read and write
54EE000
heap
page read and write
5127000
heap
page read and write
4F59000
heap
page read and write
38B3000
heap
page read and write
6079000
heap
page read and write
2780000
heap
page read and write
4D73000
heap
page read and write
28B2000
heap
page read and write
2C6000
heap
page read and write
5260000
heap
page read and write
2368000
heap
page read and write
4E68000
heap
page read and write
236C000
heap
page read and write
28B2000
heap
page read and write
23D0000
heap
page read and write
140A00000
unkown
page read and write
10000
heap
page read and write
2386000
heap
page read and write
27CD000
heap
page read and write
2368000
heap
page read and write
4F0A000
heap
page read and write
4F52000
heap
page read and write
5EC0000
heap
page read and write
6228000
heap
page read and write
28B2000
heap
page read and write
3F8F000
stack
page read and write
2376000
heap
page read and write
59B8000
heap
page read and write
104000
heap
page read and write
2C2F000
stack
page read and write
5170000
heap
page read and write
14030E000
unkown
page readonly
2386000
heap
page read and write
5472000
heap
page read and write
27AD000
heap
page read and write
27AE000
heap
page read and write
22FF000
stack
page read and write
27A6000
heap
page read and write
5A94000
heap
page read and write
2110000
heap
page read and write
54FC000
heap
page read and write
3D7000
heap
page read and write
5123000
heap
page read and write
140A29000
unkown
page read and write
27AC000
heap
page read and write
290000
heap
page read and write
5142000
heap
page read and write
572C000
heap
page read and write
50F3000
heap
page read and write
550C000
heap
page read and write
2376000
heap
page read and write
59A5000
heap
page read and write
51EA000
heap
page read and write
2F00000
heap
page read and write
140A35000
unkown
page read and write
4D75000
heap
page read and write
100000
heap
page read and write
4E87000
heap
page read and write
27AE000
heap
page read and write
3996000
heap
page read and write
558C000
heap
page read and write
2781000
heap
page read and write
4B77000
heap
page read and write
4F83000
heap
page read and write
5278000
heap
page read and write
14030E000
unkown
page readonly
4BE1000
heap
page read and write
5304000
heap
page read and write
4F60000
heap
page read and write
4E80000
heap
page read and write
54B8000
heap
page read and write
27CF000
heap
page read and write
4DEC000
heap
page read and write
2F05000
heap
page read and write
40E000
heap
page read and write
38EA000
heap
page read and write
5236000
heap
page read and write
4B15000
heap
page read and write
61CC000
heap
page read and write
1403F7000
unkown
page write copy
27CD000
heap
page read and write
4BF5000
heap
page read and write
517F000
heap
page read and write
140A1F000
unkown
page read and write
546D000
heap
page read and write
5470000
heap
page read and write
5A03000
heap
page read and write
1E30000
heap
page read and write
51A0000
heap
page read and write
4B40000
heap
page read and write
140A8F000
unkown
page readonly
4F11000
heap
page read and write
27A6000
heap
page read and write
5538000
heap
page read and write
4F0C000
heap
page read and write
239A000
heap
page read and write
28A000
stack
page read and write
54CF000
heap
page read and write
4F18000
heap
page read and write
54C1000
heap
page read and write
27A8000
heap
page read and write
468000
heap
page read and write
4CD4000
heap
page read and write
27CF000
heap
page read and write
5504000
heap
page read and write
4CE7000
heap
page read and write
2338000
heap
page read and write
58E0000
heap
page read and write
5749000
heap
page read and write
5533000
heap
page read and write
623D000
heap
page read and write
45C000
heap
page read and write
449000
heap
page read and write
458000
heap
page read and write
14017D000
unkown
page readonly
27A7000
heap
page read and write
27AC000
heap
page read and write
237A000
heap
page read and write
1E65000
heap
page read and write
553F000
heap
page read and write
52BD000
heap
page read and write
4F9A000
heap
page read and write
5574000
heap
page read and write
4F3B000
heap
page read and write
547D000
heap
page read and write
27CD000
heap
page read and write
477000
heap
page read and write
5467000
heap
page read and write
2791000
heap
page read and write
14017D000
unkown
page readonly
50ED000
heap
page read and write
27CD000
heap
page read and write
39A6000
heap
page read and write
239F000
heap
page read and write
27CD000
heap
page read and write
513B000
heap
page read and write
13FBE1000
unkown
page execute read
140301000
unkown
page readonly
4E6C000
heap
page read and write
446000
heap
page read and write
54AE000
heap
page read and write
28B2000
heap
page read and write
54F7000
heap
page read and write
54F1000
heap
page read and write
51F9000
heap
page read and write
54F4000
heap
page read and write
4F86000
heap
page read and write
2F09000
heap
page read and write
58DA000
heap
page read and write
61F8000
heap
page read and write
2790000
heap
page read and write
4E63000
heap
page read and write
140303000
unkown
page readonly
2386000
heap
page read and write
4B6D000
heap
page read and write
140A20000
unkown
page write copy
53E0000
heap
page read and write
5359000
heap
page read and write
140A02000
unkown
page write copy
4EF3000
heap
page read and write
4B8F000
heap
page read and write
53CC000
heap
page read and write
27CD000
heap
page read and write
1E60000
heap
page read and write
5511000
heap
page read and write
54B6000
heap
page read and write
2370000
heap
page read and write
5553000
heap
page read and write
3D0000
heap
page read and write
4D37000
heap
page read and write
5571000
heap
page read and write
51E0000
heap
page read and write
2365000
heap
page read and write
51AD000
heap
page read and write
140301000
unkown
page readonly
3D5E000
stack
page read and write
5548000
heap
page read and write
6207000
heap
page read and write
27AE000
heap
page read and write
4C77000
heap
page read and write
2D7F000
stack
page read and write
27BE000
heap
page read and write
566A000
heap
page read and write
4EFC000
heap
page read and write
557F000
heap
page read and write
1E9B000
heap
page read and write
140303000
unkown
page readonly
4F13000
heap
page read and write
51BC000
heap
page read and write
553B000
heap
page read and write
237A000
heap
page read and write
5135000
heap
page read and write
1403F7000
unkown
page write copy
13FBE0000
unkown
page readonly
110000
heap
page read and write
202F000
stack
page read and write
4C8B000
heap
page read and write
4FA0000
heap
page read and write
2370000
heap
page read and write
4AE0000
heap
page read and write
52F0000
heap
page read and write
554C000
heap
page read and write
50FA000
heap
page read and write
140A05000
unkown
page read and write
1D40000
heap
page read and write
27AC000
heap
page read and write
56E4000
heap
page read and write
13FBE1000
unkown
page execute read
28B2000
heap
page read and write
23DF000
heap
page read and write
61F0000
heap
page read and write
3951000
heap
page read and write
4D88000
heap
page read and write
5474000
heap
page read and write
23EF000
heap
page read and write
5587000
heap
page read and write
54CC000
heap
page read and write
4D25000
heap
page read and write
546A000
heap
page read and write
4C3D000
heap
page read and write
59AA000
heap
page read and write
4DD1000
heap
page read and write
543A000
heap
page read and write
4CC8000
heap
page read and write
4F3E000
heap
page read and write
4EFE000
heap
page read and write
50E0000
heap
page read and write
27CD000
heap
page read and write
28B2000
heap
page read and write
5D72000
heap
page read and write
5592000
heap
page read and write
23CE000
heap
page read and write
140A16000
unkown
page read and write
140A23000
unkown
page read and write
2376000
heap
page read and write
5535000
heap
page read and write
23BE000
heap
page read and write
27CD000
heap
page read and write
There are 274 hidden memdumps, click here to show them.