IOC Report
Cypress.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Cypress.exe
"C:\Users\user\Desktop\Cypress.exe"

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF79A001000
unkown
page execute read
7FF79DC01000
unkown
page execute read
7FF79B401000
unkown
page execute read
7FF79FA01000
unkown
page execute read
7FF79C801000
unkown
page execute read
7FF798C01000
unkown
page execute read
7FF799601000
unkown
page execute read
7FF79F001000
unkown
page execute read
7FF798C00000
unkown
page readonly
7FF7A0401000
unkown
page execute read
7FF79AA01000
unkown
page execute read
7FF79BE01000
unkown
page execute read
7FF79E601000
unkown
page execute read
7FF79D201000
unkown
page execute read
There are 4 hidden memdumps, click here to show them.