IOC Report
y83WAR4vQc.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\y83WAR4vQc.exe
"C:\Users\user\Desktop\y83WAR4vQc.exe"
 malicious

URLs

Name
IP
Malicious
http://nsis.sf.net/NSIS_Error
unknown
http://nsis.sf.net/NSIS_ErrorError
unknown

Memdumps

Base Address
Regiontype
Protect
Malicious
2254000
heap
page read and write
62A000
heap
page read and write
2190000
heap
page read and write
19A000
stack
page read and write
91F000
stack
page read and write
269E000
stack
page read and write
65B000
heap
page read and write
656000
heap
page read and write
670000
heap
page read and write
81F000
stack
page read and write
21F0000
heap
page read and write
431000
unkown
page read and write
400000
unkown
page readonly
65B000
heap
page read and write
408000
unkown
page write copy
217E000
stack
page read and write
99000
stack
page read and write
2199000
heap
page read and write
62E000
heap
page read and write
401000
unkown
page execute read
408000
unkown
page read and write
470000
heap
page read and write
401000
unkown
page execute read
211E000
stack
page read and write
5FE000
stack
page read and write
65E000
heap
page read and write
441000
unkown
page read and write
2200000
heap
page read and write
465000
unkown
page readonly
3FF0000
trusted library allocation
page read and write
4E0000
heap
page read and write
4CE000
stack
page read and write
2250000
heap
page read and write
2130000
heap
page read and write
422000
unkown
page read and write
465000
unkown
page readonly
656000
heap
page read and write
65F000
heap
page read and write
279F000
stack
page read and write
480000
heap
page read and write
400000
unkown
page readonly
4E5000
heap
page read and write
2195000
heap
page read and write
620000
heap
page read and write
20C0000
heap
page read and write
There are 35 hidden memdumps, click here to show them.