IOC Report
webNY0O9Sr.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\webNY0O9Sr.exe
"C:\Users\user\Desktop\webNY0O9Sr.exe"
 malicious
C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
 malicious

URLs

Name
IP
Malicious
commandejorsk.site
malicious
agentyanlark.site
malicious
https://nurserrsjwuwq.shop/api
188.114.96.3
 malicious
https://gravvitywio.store/api
172.67.209.193
 malicious
underlinemdsj.site
malicious
possiwreeste.site
malicious
famikyjdiag.site
malicious
https://steamcommunity.com/profiles/76561199724331900
104.102.49.254
 malicious
https://steamcommunity.com/profiles/76561199724331900/inventory/
unknown
 malicious
bellykmrebk.site
malicious
writekdmsnu.site
malicious
delaylacedmn.site
malicious
nurserrsjwuwq.shop
malicious
https://steamcommunity.com/profiles/76561199724331900/badges
unknown
 malicious
https://steamcommunity.com/my/wishlist/
unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=9OzcxMXbaV84&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&amp
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://help.steampowered.com/en/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
https://writekdmsnu.site/api
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=8vRVyaZK
unknown
https://vault.azure.net/mysql.database.azure.comhttps://cosmos.azure.comexec:
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1
unknown
http://repository.certum.pl/cevcsca2021.cer0
unknown
https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=w4s3
unknown
http://www.valvesoftware.com/legal.htm
unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=pvBDaFhF2LLJ&l=e
unknown
https://steamcommunity.com/discussions/
unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://gravvitywio.store/
unknown
https://nurserrsjwuwq.shop/x
unknown
https://store.steampowered.com/stats/
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
unknown
https://store.steampowered.com/steam_refunds/
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&
unknown
http://subca.ocsp-certum.com02
unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
unknown
http://crl.certum.pl/ctnca2.crl0l
unknown
http://repository.certum.pl/ctnca2.cer09
unknown
https://commandejorsk.site/api
unknown
https://gravvitywio.store/_
unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
unknown
https://delaylacedmn.site/apiR
unknown
https://steamcommunity.com/workshop/
unknown
https://store.steampowered.com/legal/
unknown
http://www.certum.pl/CPS0
unknown
https://community.akamai.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=e
unknown
http://cevcsca2021.ocsp-certum.com07
unknown
https://datalake.azure.net/https://api.loganalytics.iohttps://graph.microsoft.us/https://api.loganal
unknown
https://commandejorsk.site/api#
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSv
unknown
https://community.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=engl
unknown
http://store.steampowered.com/privacy_agreement/
unknown
https://gravvitywio.store/apiI
unknown
https://store.steampowered.com/points/shop/
unknown
https://store.steampowered.com/
unknown
http://cevcsca2021.crl.certum.pl/cevcsca2021.crl0w
unknown
https://community.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw
unknown
https://www.certum.pl/CPS0
unknown
https://community.akamai.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=Ev2sBLgkgyWJ&a
unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=ezWS9te9Zwm9&l=en
unknown
https://manage.windowsazure.com/publishsettings/indexqbusiness.cn-northwest-1.api.amazonwebservices.
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
unknown
https://community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&am
unknown
https://community.akamai.steamstatic.com/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english
unknown
https://delaylacedmn.site/api
unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
unknown
https://writekdmsnu.site/apii
unknown
http://store.steampowered.com/account/cookiepreferences/
unknown
https://store.steampowered.com/mobile
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
https://steamcommunity.com/
unknown
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=f3vWO7swdDqp&l=english
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
unknown
https://nurserrsjwuwq.shop/api3
unknown
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
unknown
https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=f2hMA1v9Zkc8&l=engl
unknown
https://manage.chinacloudapi.com/publishsettings/indexhttps://manage.microsoftazure.de/publishsettin
unknown
https://store.steampowered.com/about/
unknown
There are 85 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
gravvitywio.store
172.67.209.193
 malicious
nurserrsjwuwq.shop
188.114.96.3
 malicious
possiwreeste.site
unknown
 malicious
commandejorsk.site
unknown
 malicious
famikyjdiag.site
unknown
 malicious
writekdmsnu.site
unknown
 malicious
agentyanlark.site
unknown
 malicious
delaylacedmn.site
unknown
 malicious
underlinemdsj.site
unknown
 malicious
bellykmrebk.site
unknown
 malicious
steamcommunity.com
104.102.49.254
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
188.114.96.3
nurserrsjwuwq.shop
European Union
malicious
172.67.209.193
gravvitywio.store
United States
malicious
104.102.49.254
steamcommunity.com
United States

Memdumps

Base Address
Regiontype
Protect
Malicious
25D4000
direct allocation
page read and write
 malicious
2577000
direct allocation
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
137C000
stack
page read and write
3192000
heap
page read and write
228E000
direct allocation
page read and write
1CC0000
heap
page read and write
2288000
direct allocation
page read and write
AB1000
unkown
page readonly
201A000
direct allocation
page read and write
1F93000
direct allocation
page read and write
1021000
unkown
page readonly
12B5000
unkown
page readonly
2050000
direct allocation
page read and write
236E000
direct allocation
page read and write
2072000
direct allocation
page read and write
1273000
unkown
page read and write
3107000
heap
page read and write
3197000
heap
page read and write
3123000
heap
page read and write
22AA000
direct allocation
page read and write
2000000
direct allocation
page read and write
2180000
direct allocation
page read and write
1CD0000
direct allocation
page read and write
313D000
heap
page read and write
22BC000
direct allocation
page read and write
30E8000
heap
page read and write
12AB000
unkown
page read and write
2396000
direct allocation
page read and write
12B4000
unkown
page write copy
2306000
direct allocation
page read and write
2400000
direct allocation
page read and write
30D0000
remote allocation
page read and write
3123000
heap
page read and write
13E0000
heap
page read and write
1010000
unkown
page readonly
102B000
unkown
page readonly
23BC000
direct allocation
page read and write
22D2000
direct allocation
page read and write
3192000
heap
page read and write
2378000
direct allocation
page read and write
1C2F000
stack
page read and write
2300000
direct allocation
page read and write
4F2D000
stack
page read and write
206A000
direct allocation
page read and write
121D000
unkown
page write copy
200E000
direct allocation
page read and write
20FE000
direct allocation
page read and write
1A10000
heap
page read and write
761000
unkown
page execute read
54AE000
stack
page read and write
2DDE000
stack
page read and write
1023000
unkown
page readonly
101E000
unkown
page readonly
1F8F000
direct allocation
page read and write
3192000
heap
page read and write
218A000
direct allocation
page read and write
208C000
direct allocation
page read and write
30FC000
heap
page read and write
230E000
direct allocation
page read and write
220F000
direct allocation
page read and write
2630000
direct allocation
page read and write
212E000
direct allocation
page read and write
20B8000
direct allocation
page read and write
536F000
stack
page read and write
22B4000
direct allocation
page read and write
207A000
direct allocation
page read and write
2390000
direct allocation
page read and write
1007000
unkown
page readonly
200C000
direct allocation
page read and write
219E000
direct allocation
page read and write
AB1000
unkown
page readonly
2392000
direct allocation
page read and write
4D20000
heap
page read and write
2340000
direct allocation
page read and write
1053000
unkown
page readonly
104B000
unkown
page readonly
126B000
unkown
page read and write
2312000
direct allocation
page read and write
2012000
direct allocation
page read and write
1018000
unkown
page readonly
23AE000
direct allocation
page read and write
19B0000
direct allocation
page read and write
313D000
heap
page read and write
267E000
direct allocation
page read and write
213E000
direct allocation
page read and write
4C8D000
stack
page read and write
4E2E000
stack
page read and write
22301000
direct allocation
page read and write
2006000
direct allocation
page read and write
33AE000
stack
page read and write
23B2000
direct allocation
page read and write
2004000
direct allocation
page read and write
204C000
direct allocation
page read and write
210C000
direct allocation
page read and write
2014000
direct allocation
page read and write
235C000
direct allocation
page read and write
1217000
unkown
page write copy
101E000
unkown
page readonly
2143000
direct allocation
page read and write
220FF000
stack
page read and write
1026000
unkown
page readonly
221FE000
stack
page read and write
19FD000
stack
page read and write
318D000
heap
page read and write
318D000
heap
page read and write
2247F000
stack
page read and write
207C000
direct allocation
page read and write
238A000
direct allocation
page read and write
2356000
direct allocation
page read and write
53AD000
stack
page read and write
2045000
direct allocation
page read and write
2DE0000
heap
page read and write
318B000
heap
page read and write
1A3B000
heap
page read and write
102B000
unkown
page readonly
2134000
direct allocation
page read and write
22AE000
direct allocation
page read and write
12B4000
unkown
page write copy
233A000
direct allocation
page read and write
202A000
direct allocation
page read and write
312F000
heap
page read and write
2380000
direct allocation
page read and write
1218000
unkown
page read and write
30D0000
remote allocation
page read and write
231E000
direct allocation
page read and write
211A000
direct allocation
page read and write
313D000
heap
page read and write
2394000
direct allocation
page read and write
2002000
direct allocation
page read and write
233C000
direct allocation
page read and write
2010000
direct allocation
page read and write
2328000
direct allocation
page read and write
239C000
direct allocation
page read and write
2064000
direct allocation
page read and write
2334000
direct allocation
page read and write
233E000
direct allocation
page read and write
1010000
unkown
page readonly
318B000
heap
page read and write
22AC000
direct allocation
page read and write
312F000
heap
page read and write
2237D000
stack
page read and write
3123000
heap
page read and write
101B000
unkown
page readonly
2388000
direct allocation
page read and write
55EE000
stack
page read and write
26E6000
direct allocation
page read and write
2016000
direct allocation
page read and write
2086000
direct allocation
page read and write
1023000
unkown
page readonly
1840000
heap
page read and write
318D000
heap
page read and write
2322000
direct allocation
page read and write
238E000
direct allocation
page read and write
237A000
direct allocation
page read and write
121E000
unkown
page read and write
232A000
direct allocation
page read and write
314A000
heap
page read and write
1217000
unkown
page write copy
1018000
unkown
page readonly
2080000
direct allocation
page read and write
3194000
heap
page read and write
1252000
unkown
page write copy
180E000
stack
page read and write
101B000
unkown
page readonly
2068000
direct allocation
page read and write
23D5000
direct allocation
page read and write
121F000
unkown
page write copy
303E000
stack
page read and write
214E000
direct allocation
page read and write
1845000
heap
page read and write
1007000
unkown
page readonly
23A2000
direct allocation
page read and write
2036000
direct allocation
page read and write
232E000
direct allocation
page read and write
2346000
direct allocation
page read and write
200A000
direct allocation
page read and write
2D2C000
stack
page read and write
318D000
heap
page read and write
1A30000
heap
page read and write
2088000
direct allocation
page read and write
760000
unkown
page readonly
2326000
direct allocation
page read and write
1253000
unkown
page read and write
2038000
direct allocation
page read and write
2078000
direct allocation
page read and write
2398000
direct allocation
page read and write
30D0000
remote allocation
page read and write
235E000
direct allocation
page read and write
FEE000
unkown
page readonly
22C4000
direct allocation
page read and write
16FD000
stack
page read and write
2118000
direct allocation
page read and write
3109000
heap
page read and write
2320000
direct allocation
page read and write
30E0000
heap
page read and write
1CB0000
direct allocation
page read and write
211C000
direct allocation
page read and write
2342000
direct allocation
page read and write
12E6000
unkown
page readonly
2317000
direct allocation
page read and write
2CEC000
stack
page read and write
201C000
direct allocation
page read and write
1C6D000
stack
page read and write
34AF000
stack
page read and write
207E000
direct allocation
page read and write
309D000
stack
page read and write
3192000
heap
page read and write
1830000
direct allocation
page read and write
206C000
direct allocation
page read and write
24DC000
direct allocation
page read and write
1F4D000
stack
page read and write
224CC000
direct allocation
page read and write
2364000
direct allocation
page read and write
2319000
direct allocation
page read and write
2374000
direct allocation
page read and write
2070000
direct allocation
page read and write
3040000
heap
page read and write
204E000
direct allocation
page read and write
222FF000
stack
page read and write
2330000
direct allocation
page read and write
12B5000
unkown
page readonly
1A00000
heap
page read and write
4CEE000
stack
page read and write
2018000
direct allocation
page read and write
1950000
direct allocation
page read and write
1249000
unkown
page read and write
2336000
direct allocation
page read and write
2D90000
heap
page read and write
2008000
direct allocation
page read and write
2294000
direct allocation
page read and write
2370000
direct allocation
page read and write
23B8000
direct allocation
page read and write
310D000
heap
page read and write
2052000
direct allocation
page read and write
310D000
heap
page read and write
30FC000
heap
page read and write
239A000
direct allocation
page read and write
318B000
heap
page read and write
FEE000
unkown
page readonly
2112000
direct allocation
page read and write
22C2000
direct allocation
page read and write
1021000
unkown
page readonly
236C000
direct allocation
page read and write
2030000
direct allocation
page read and write
232C000
direct allocation
page read and write
318B000
heap
page read and write
319B000
heap
page read and write
312F000
heap
page read and write
2358000
direct allocation
page read and write
30F8000
heap
page read and write
22A8000
direct allocation
page read and write
1026000
unkown
page readonly
54EE000
stack
page read and write
3149000
heap
page read and write
104B000
unkown
page readonly
2386000
direct allocation
page read and write
1CAD000
stack
page read and write
2368000
direct allocation
page read and write
319D000
heap
page read and write
2114000
direct allocation
page read and write
760000
unkown
page readonly
30C5000
heap
page read and write
2048000
direct allocation
page read and write
23B0000
direct allocation
page read and write
310D000
heap
page read and write
1257000
unkown
page write copy
2314000
direct allocation
page read and write
1053000
unkown
page readonly
461000
remote allocation
page execute and read and write
194F000
stack
page read and write
206E000
direct allocation
page read and write
237E000
direct allocation
page read and write
761000
unkown
page execute read
30C0000
heap
page read and write
3192000
heap
page read and write
1958000
direct allocation
page read and write
12E6000
unkown
page readonly
279C000
direct allocation
page read and write
213A000
direct allocation
page read and write
There are 270 hidden memdumps, click here to show them.