IOC Report
Login_msifar.txt.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Login_msifar.txt.exe
"C:\Users\user\Desktop\Login_msifar.txt.exe"
 malicious

URLs

Name
IP
Malicious
https://autohotkey.com
unknown
https://autohotkey.comCould
unknown

Memdumps

Base Address
Regiontype
Protect
Malicious
AD4000
heap
page read and write
AC1000
heap
page read and write
4B8000
unkown
page readonly
9C0000
heap
page read and write
4B8000
unkown
page readonly
A98000
heap
page read and write
4CE000
unkown
page readonly
A60000
trusted library section
page read and write
2B90000
heap
page read and write
401000
unkown
page execute read
4CE000
unkown
page readonly
AD1000
heap
page read and write
4E2000
unkown
page read and write
ADA000
heap
page read and write
9B0000
heap
page read and write
AFA000
heap
page read and write
A90000
heap
page read and write
8EF000
stack
page read and write
4EC000
unkown
page readonly
AD3000
heap
page read and write
ADD000
heap
page read and write
110000
heap
page read and write
8E6000
stack
page read and write
4EC000
unkown
page readonly
ADC000
heap
page read and write
401000
unkown
page execute read
1F0000
heap
page read and write
9C4000
heap
page read and write
8FC000
stack
page read and write
400000
unkown
page readonly
4E4000
unkown
page read and write
1570000
heap
page read and write
4E2000
unkown
page write copy
A50000
trusted library section
page read and write
A70000
trusted library section
page read and write
9A000
stack
page read and write
4E7000
unkown
page read and write
1578000
heap
page read and write
4E6000
unkown
page write copy
8DF000
stack
page read and write
4E3000
unkown
page write copy
8CE000
stack
page read and write
D0000
heap
page read and write
ADC000
heap
page read and write
1530000
heap
page read and write
400000
unkown
page readonly
There are 36 hidden memdumps, click here to show them.