IOC Report
file.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\file.exe
"C:\Users\user\Desktop\file.exe"
malicious

URLs

Name
IP
Malicious
http://185.215.113.206/c4becf79229cb002.php
185.215.113.206
http://185.215.113.206/c4becf79229cb002.php/
unknown
http://185.215.113.206/c4becf79229cb002.php/=
unknown
http://185.215.113.206/
185.215.113.206
http://185.215.113.206/c4becf79229cb002.phpjG
unknown
http://185.215.113.206
unknown
http://185.215.113.206/X
unknown
http://185.215.113.206/c4becf79229cb002.phplP
unknown
http://185.215.113.206/u
unknown
185.215.113.206/c4becf79229cb002.php
http://185.215.113.206/c4becf79229cb002.phptop
unknown
There are 1 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
185.215.113.206
unknown
Portugal
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
F28000
heap
page read and write
malicious
4D30000
direct allocation
page read and write
malicious
391000
unkown
page execute and read and write
malicious
EF4000
heap
page read and write
426E000
stack
page read and write
F76000
heap
page read and write
2BAF000
stack
page read and write
EF4000
heap
page read and write
44FE000
stack
page read and write
35EE000
stack
page read and write
4880000
direct allocation
page read and write
A05000
unkown
page execute and read and write
386E000
stack
page read and write
422F000
stack
page read and write
EF4000
heap
page read and write
EE0000
heap
page read and write
3AAF000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
3C7000
unkown
page execute and read and write
43BE000
stack
page read and write
872000
unkown
page execute and read and write
2F6F000
stack
page read and write
EF4000
heap
page read and write
43F000
unkown
page execute and read and write
85B000
unkown
page execute and read and write
EF4000
heap
page read and write
4891000
heap
page read and write
E00000
heap
page read and write
3FEE000
stack
page read and write
5DC000
unkown
page execute and read and write
4891000
heap
page read and write
4891000
heap
page read and write
119E000
stack
page read and write
390000
unkown
page read and write
873000
unkown
page execute and write copy
31EF000
stack
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
EF4000
heap
page read and write
758000
unkown
page execute and read and write
B94000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
1D1FD000
stack
page read and write
463E000
stack
page read and write
436F000
stack
page read and write
F0A000
heap
page read and write
F83000
heap
page read and write
4891000
heap
page read and write
4894000
heap
page read and write
4891000
heap
page read and write
3D6E000
stack
page read and write
396F000
stack
page read and write
EF4000
heap
page read and write
F56000
heap
page read and write
EF4000
heap
page read and write
A06000
unkown
page execute and write copy
F6A000
heap
page read and write
4891000
heap
page read and write
4880000
direct allocation
page read and write
3FAF000
stack
page read and write
5C8000
unkown
page execute and read and write
4891000
heap
page read and write
36EF000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
F23000
heap
page read and write
EF4000
heap
page read and write
48A0000
heap
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
5DA000
unkown
page read and write
5DA000
unkown
page write copy
4880000
direct allocation
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
1D0BE000
stack
page read and write
4D66000
direct allocation
page read and write
1CCEE000
stack
page read and write
4891000
heap
page read and write
382F000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
2FAE000
stack
page read and write
1CF2F000
stack
page read and write
1CCAF000
stack
page read and write
F00000
heap
page read and write
2CEF000
stack
page read and write
3D2F000
stack
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
B9D000
stack
page read and write
EF4000
heap
page read and write
3C2E000
stack
page read and write
4891000
heap
page read and write
2D2E000
stack
page read and write
4891000
heap
page read and write
129E000
stack
page read and write
4D20000
direct allocation
page read and write
391000
unkown
page execute and write copy
473F000
stack
page read and write
863000
unkown
page execute and read and write
412E000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
3E6F000
stack
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
426000
unkown
page execute and read and write
48B0000
heap
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
2A57000
heap
page read and write
4880000
direct allocation
page read and write
4880000
direct allocation
page read and write
346F000
stack
page read and write
477E000
stack
page read and write
4891000
heap
page read and write
115E000
stack
page read and write
4891000
heap
page read and write
1CE2E000
stack
page read and write
EF4000
heap
page read and write
EF4000
heap
page read and write
FA4000
heap
page read and write
EF4000
heap
page read and write
4880000
direct allocation
page read and write
4891000
heap
page read and write
4E80000
direct allocation
page execute and read and write
4880000
direct allocation
page read and write
EF4000
heap
page read and write
F74000
heap
page read and write
4E90000
direct allocation
page execute and read and write
4891000
heap
page read and write
EF4000
heap
page read and write
EF4000
heap
page read and write
F0E000
heap
page read and write
4EB0000
direct allocation
page execute and read and write
F51000
heap
page read and write
2E6E000
stack
page read and write
4891000
heap
page read and write
322E000
stack
page read and write
F9D000
heap
page read and write
2E2F000
stack
page read and write
4891000
heap
page read and write
4D6C000
stack
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
EF0000
heap
page read and write
4891000
heap
page read and write
4EA0000
direct allocation
page execute and read and write
EF4000
heap
page read and write
3BEF000
stack
page read and write
1D06F000
stack
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
332F000
stack
page read and write
EF4000
heap
page read and write
105E000
stack
page read and write
4D20000
direct allocation
page read and write
F93000
heap
page read and write
EF4000
heap
page read and write
EF4000
heap
page read and write
4D20000
direct allocation
page read and write
4880000
direct allocation
page read and write
336E000
stack
page read and write
1CBAE000
stack
page read and write
A9C000
stack
page read and write
4E6F000
stack
page read and write
4EB0000
direct allocation
page execute and read and write
2AAE000
stack
page read and write
EF4000
heap
page read and write
45FF000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
487F000
stack
page read and write
30EE000
stack
page read and write
2A50000
heap
page read and write
40EF000
stack
page read and write
F7A000
heap
page read and write
4EC0000
direct allocation
page execute and read and write
39AE000
stack
page read and write
4370000
heap
page read and write
EF4000
heap
page read and write
4880000
direct allocation
page read and write
4890000
heap
page read and write
41E000
unkown
page execute and read and write
4891000
heap
page read and write
82D000
unkown
page execute and read and write
EF4000
heap
page read and write
1CF6E000
stack
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
4891000
heap
page read and write
1CDEF000
stack
page read and write
1D2FC000
stack
page read and write
4E80000
heap
page read and write
4880000
direct allocation
page read and write
1D1BD000
stack
page read and write
44BF000
stack
page read and write
35AF000
stack
page read and write
34AE000
stack
page read and write
EF4000
heap
page read and write
30AF000
stack
page read and write
372E000
stack
page read and write
4880000
direct allocation
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
4880000
direct allocation
page read and write
4880000
direct allocation
page read and write
3AEE000
stack
page read and write
3EAE000
stack
page read and write
390000
unkown
page readonly
4CD0000
trusted library allocation
page read and write
EF4000
heap
page read and write
4ED0000
direct allocation
page execute and read and write
872000
unkown
page execute and write copy
4891000
heap
page read and write
EF4000
heap
page read and write
2A5B000
heap
page read and write
EF4000
heap
page read and write
4880000
direct allocation
page read and write
2BEB000
stack
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
EF4000
heap
page read and write
4891000
heap
page read and write
There are 229 hidden memdumps, click here to show them.