IOC Report
SecuriteInfo.com.Win32.Application.PSE.10ODIJ9.16935.29885.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\SecuriteInfo.com.Win32.Application.PSE.10ODIJ9.16935.29885.exe
"C:\Users\user\Desktop\SecuriteInfo.com.Win32.Application.PSE.10ODIJ9.16935.29885.exe"
 malicious

URLs

Name
IP
Malicious
http://www.eyuyan.com)DVarFileInfo$
unknown

Domains

Name
IP
Malicious
15.164.165.52.in-addr.arpa
unknown

Memdumps

Base Address
Regiontype
Protect
Malicious
480000
unkown
page readonly
2584000
heap
page read and write
6F4000
heap
page read and write
494000
unkown
page write copy
4C0000
heap
page read and write
400000
unkown
page readonly
75A000
heap
page read and write
4B1000
unkown
page read and write
6F0000
heap
page read and write
480000
unkown
page readonly
62E000
stack
page read and write
75E000
heap
page read and write
28D0000
heap
page read and write
4130000
trusted library allocation
page read and write
97000
stack
page read and write
256E000
stack
page read and write
3D2F000
stack
page read and write
2580000
heap
page read and write
23A0000
heap
page read and write
400000
unkown
page readonly
401000
unkown
page execute read
700000
heap
page read and write
6E0000
heap
page read and write
401000
unkown
page execute read
4A1000
unkown
page read and write
5A0000
heap
page read and write
78C000
heap
page read and write
750000
heap
page read and write
4A5000
unkown
page read and write
496000
unkown
page read and write
494000
unkown
page write copy
775000
heap
page read and write
23A5000
heap
page read and write
A4F000
stack
page read and write
498000
unkown
page write copy
4B6000
unkown
page readonly
785000
heap
page read and write
640000
heap
page read and write
4A5000
unkown
page write copy
23A9000
heap
page read and write
7A8000
heap
page read and write
28D8000
heap
page read and write
781000
heap
page read and write
19C000
stack
page read and write
650000
heap
page read and write
4B6000
unkown
page readonly
There are 36 hidden memdumps, click here to show them.