IOC Report
6wjCYfcM3a.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\6wjCYfcM3a.exe
"C:\Users\user\Desktop\6wjCYfcM3a.exe"
 malicious
C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
 malicious

URLs

Name
IP
Malicious
raciimoppero.shop
malicious
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
https://player.vimeo.com
unknown
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
stogeneratmns.shop
reinforcenh.shop
http://www.valvesoftware.com/legal.htm
unknown
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
unknown
https://www.youtube.com
unknown
https://www.google.com
unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=1aq3
unknown
https://store.steampowered.~
unknown
ghostreedmnu.shop
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
unknown
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
unknown
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
unknown
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
unknown
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
unknown
https://community.fastly.steamstatic.com/
unknown
https://steam.tv/
unknown
https://steamcommunity.com/profiles/76561199724331900
23.55.153.106
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
unknown
https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=TtnlHyaDdydL&a
unknown
http://store.steampowered.com/privacy_agreement/
unknown
https://store.steampowered.com/points/shop/
unknown
https://steamcommunity.com/a
unknown
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
unknown
https://sketchfab.com
unknown
https://lv.queniujq.cn
unknown
https://steamcommunity.com/profiles/76561199724331900/inventory/
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
unknown
fragnantbui.shop
https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C820d04e8bfee2ac
unknown
offensivedzvju.shop
drawzhotdog.shop
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
unknown
https://www.google.com/recaptcha/
unknown
https://checkout.steampowered.com/
unknown
vozmeatillu.shop
https://store.steampowered.com/;
unknown
https://store.steampowered.com/about/
unknown
https://steamcommunity.com/my/wishlist/
unknown
https://marshal-zhukov.com/apiy
unknown
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
unknown
https://help.steampowered.com/en/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
https://recaptcha.net/recaptcha/;
unknown
https://marshal-zhukov.com/apiFz
unknown
https://steamcommunity.com/discussions/
unknown
https://store.steampowered.com/stats/
unknown
https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
unknown
https://medal.tv
unknown
https://broadcast.st.dl.eccdnx.com
unknown
https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
unknown
https://store.steampowered.com/steam_refunds/
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
unknown
https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
unknown
https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
unknown
https://marshal-zhukov.com/api
172.67.160.80
https://steamcommunity.com/workshop/
unknown
https://login.steampowered.com/
unknown
https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
unknown
https://store.steampowered.com/legal/
unknown
https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
unknown
https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
unknown
https://marshal-zhukov.com/api=
unknown
https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
unknown
https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=Cjx2-oLb
unknown
https://store.steampowered.com/
unknown
https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=utrRJIcYVmWz&l=e
unknown
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
http://127.0.0.1:27060
unknown
https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://marshal-zhukov.com/b
unknown
https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
unknown
gutterydhowi.shop
https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
unknown
https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
unknown
https://help.steampowered.com/
unknown
https://steamcommunity.com/profiles/765611997243319009
unknown
https://api.steampowered.com/
unknown
https://marshal-zhukov.com/
unknown
http://store.steampowered.com/account/cookiepreferences/
unknown
https://store.steampowered.com/mobile
unknown
https://steamcommunity.com/
unknown
https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
unknown
https://steamcommunity.com/profiles/76561199724331900/badges
unknown
There are 87 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
fragnantbui.shop
unknown
 malicious
gutterydhowi.shop
unknown
 malicious
raciimoppero.shop
unknown
 malicious
offensivedzvju.shop
unknown
 malicious
stogeneratmns.shop
unknown
 malicious
reinforcenh.shop
unknown
 malicious
drawzhotdog.shop
unknown
 malicious
ghostreedmnu.shop
unknown
 malicious
vozmeatillu.shop
unknown
 malicious
steamcommunity.com
23.55.153.106
marshal-zhukov.com
172.67.160.80
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
172.67.160.80
marshal-zhukov.com
United States
23.55.153.106
steamcommunity.com
United States

Memdumps

Base Address
Regiontype
Protect
Malicious
1FB4000
direct allocation
page read and write
 malicious
2188000
direct allocation
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
529F000
stack
page read and write
14F0000
heap
page read and write
B8C000
unkown
page readonly
19AD000
stack
page read and write
21D7D000
stack
page read and write
300000
unkown
page readonly
DAA000
unkown
page write copy
1C0C000
direct allocation
page read and write
3129000
heap
page read and write
30F6000
heap
page read and write
B54000
unkown
page readonly
D24000
unkown
page write copy
1C1A000
direct allocation
page read and write
3176000
heap
page read and write
1EBA000
direct allocation
page read and write
1DDA000
direct allocation
page read and write
1F78000
direct allocation
page read and write
1EE6000
direct allocation
page read and write
1F60000
direct allocation
page read and write
3112000
heap
page read and write
B5C000
unkown
page readonly
53DE000
stack
page read and write
1BEF000
stack
page read and write
1CDE000
direct allocation
page read and write
3173000
heap
page read and write
1CC8000
direct allocation
page read and write
1C88000
direct allocation
page read and write
11E0000
heap
page read and write
1CC6000
direct allocation
page read and write
21E80000
heap
page read and write
3193000
heap
page read and write
3126000
heap
page read and write
1CB6000
direct allocation
page read and write
30EB000
heap
page read and write
12FE000
stack
page read and write
1CA6000
direct allocation
page read and write
1E6C000
direct allocation
page read and write
1FA2000
direct allocation
page read and write
1AAE000
stack
page read and write
1C2A000
direct allocation
page read and write
21EE2000
direct allocation
page read and write
1F00000
direct allocation
page read and write
1C4C000
direct allocation
page read and write
1C98000
direct allocation
page read and write
2BCE000
stack
page read and write
1EA1000
direct allocation
page read and write
1D1E000
direct allocation
page read and write
300000
unkown
page readonly
1F6E000
direct allocation
page read and write
1C5A000
direct allocation
page read and write
1C04000
direct allocation
page read and write
1E1E000
direct allocation
page read and write
3172000
heap
page read and write
1F7E000
direct allocation
page read and write
14FC000
heap
page read and write
30CD000
stack
page read and write
117D000
stack
page read and write
1EE3000
direct allocation
page read and write
D1D000
unkown
page read and write
301000
unkown
page execute read
1CD4000
direct allocation
page read and write
3186000
heap
page read and write
1300000
heap
page read and write
1F9C000
direct allocation
page read and write
1EDE000
direct allocation
page read and write
1F47000
direct allocation
page read and write
4B6E000
stack
page read and write
21EE4000
direct allocation
page read and write
3182000
heap
page read and write
3189000
heap
page read and write
1EDC000
direct allocation
page read and write
B61000
unkown
page readonly
3115000
heap
page read and write
4BBD000
stack
page read and write
52B0000
heap
page read and write
DD7000
unkown
page readonly
DA2000
unkown
page read and write
B51000
unkown
page readonly
60F000
unkown
page readonly
1DDE000
direct allocation
page read and write
228E000
direct allocation
page read and write
B84000
unkown
page readonly
30FC000
heap
page read and write
1EDA000
direct allocation
page read and write
B8C000
unkown
page readonly
30EB000
heap
page read and write
30D8000
heap
page read and write
1F04000
direct allocation
page read and write
1EF0000
direct allocation
page read and write
1C8A000
direct allocation
page read and write
1F4F000
direct allocation
page read and write
317D000
heap
page read and write
1CF0000
direct allocation
page read and write
2B1C000
stack
page read and write
4B70000
remote allocation
page read and write
B3C000
unkown
page readonly
3172000
heap
page read and write
D56000
unkown
page read and write
1ED4000
direct allocation
page read and write
1C14000
direct allocation
page read and write
1C2E000
direct allocation
page read and write
B56000
unkown
page readonly
301000
unkown
page execute read
30D0000
heap
page read and write
1C9C000
direct allocation
page read and write
1EC2000
direct allocation
page read and write
1CDC000
direct allocation
page read and write
1C30000
direct allocation
page read and write
1F7A000
direct allocation
page read and write
1C0E000
direct allocation
page read and write
1CD6000
direct allocation
page read and write
D23000
unkown
page read and write
D20000
unkown
page write copy
1C56000
direct allocation
page read and write
1CBE000
direct allocation
page read and write
1F4A000
direct allocation
page read and write
3193000
heap
page read and write
315F000
heap
page read and write
21E7F000
stack
page read and write
D5F000
unkown
page read and write
2BD0000
heap
page read and write
1CD8000
direct allocation
page read and write
3189000
heap
page read and write
1F55000
direct allocation
page read and write
1DCA000
direct allocation
page read and write
1F5C000
direct allocation
page read and write
1C86000
direct allocation
page read and write
2B80000
heap
page read and write
1ED6000
direct allocation
page read and write
1C3F000
direct allocation
page read and write
1E00000
direct allocation
page read and write
1C32000
direct allocation
page read and write
B56000
unkown
page readonly
1C02000
direct allocation
page read and write
5490000
heap
page read and write
3180000
heap
page read and write
1F68000
direct allocation
page read and write
147E000
stack
page read and write
D5E000
unkown
page write copy
14C0000
direct allocation
page read and write
1F3B000
direct allocation
page read and write
B3F000
unkown
page readonly
B5C000
unkown
page readonly
4C2E000
stack
page read and write
52A0000
heap
page read and write
1CA2000
direct allocation
page read and write
1C80000
direct allocation
page read and write
2F85000
heap
page read and write
3193000
heap
page read and write
317D000
heap
page read and write
1CE6000
direct allocation
page read and write
1320000
direct allocation
page read and write
1CB0000
direct allocation
page read and write
1CEE000
direct allocation
page read and write
4D5D000
stack
page read and write
196F000
stack
page read and write
15F0000
direct allocation
page read and write
3189000
heap
page read and write
D69000
unkown
page read and write
541F000
stack
page read and write
3186000
heap
page read and write
1DE2000
direct allocation
page read and write
30FC000
heap
page read and write
D22000
unkown
page write copy
1C5C000
direct allocation
page read and write
1F72000
direct allocation
page read and write
B3F000
unkown
page readonly
1C16000
direct allocation
page read and write
1F96000
direct allocation
page read and write
3115000
heap
page read and write
21E0000
direct allocation
page read and write
B27000
unkown
page readonly
3115000
heap
page read and write
1F80000
direct allocation
page read and write
21C3D000
stack
page read and write
14D0000
heap
page read and write
1EC0000
direct allocation
page read and write
1CE8000
direct allocation
page read and write
60F000
unkown
page readonly
1D62000
direct allocation
page read and write
1C90000
direct allocation
page read and write
3183000
heap
page read and write
1F57000
direct allocation
page read and write
B84000
unkown
page readonly
DAA000
unkown
page write copy
1328000
direct allocation
page read and write
1E52000
direct allocation
page read and write
308F000
stack
page read and write
1C96000
direct allocation
page read and write
1C38000
direct allocation
page read and write
1CB8000
direct allocation
page read and write
21EFE000
direct allocation
page read and write
1C92000
direct allocation
page read and write
21D3F000
stack
page read and write
21EA0000
direct allocation
page read and write
1F51000
direct allocation
page read and write
20D8000
direct allocation
page read and write
1EB4000
direct allocation
page read and write
1C94000
direct allocation
page read and write
186D000
stack
page read and write
1DE7000
direct allocation
page read and write
1C58000
direct allocation
page read and write
301000
unkown
page execute read
1EE1000
direct allocation
page read and write
315D000
heap
page read and write
3186000
heap
page read and write
14B0000
direct allocation
page read and write
2186000
direct allocation
page read and write
60F000
unkown
page readonly
2F0E000
stack
page read and write
1C18000
direct allocation
page read and write
1ECC000
direct allocation
page read and write
2ADB000
stack
page read and write
B51000
unkown
page readonly
32CE000
stack
page read and write
1C00000
direct allocation
page read and write
21FDD000
stack
page read and write
1370000
heap
page read and write
2F10000
heap
page read and write
3175000
heap
page read and write
1EF6000
direct allocation
page read and write
1F70000
direct allocation
page read and write
30FC000
heap
page read and write
3175000
heap
page read and write
1D59000
direct allocation
page read and write
B61000
unkown
page readonly
DAB000
unkown
page readonly
1F6A000
direct allocation
page read and write
2F6D000
stack
page read and write
315E000
heap
page read and write
1F64000
direct allocation
page read and write
519D000
stack
page read and write
B27000
unkown
page readonly
1CB2000
direct allocation
page read and write
21EF0000
direct allocation
page read and write
4C50000
heap
page read and write
3172000
heap
page read and write
1AED000
stack
page read and write
B3C000
unkown
page readonly
DA6000
unkown
page read and write
3112000
heap
page read and write
1CA0000
direct allocation
page read and write
220DF000
stack
page read and write
1F40000
direct allocation
page read and write
1CC0000
direct allocation
page read and write
3189000
heap
page read and write
1F8E000
direct allocation
page read and write
3186000
heap
page read and write
DAB000
unkown
page readonly
1EC8000
direct allocation
page read and write
1C36000
direct allocation
page read and write
200C000
direct allocation
page read and write
14E0000
direct allocation
page read and write
B59000
unkown
page readonly
21EA9000
direct allocation
page read and write
1D54000
direct allocation
page read and write
1C12000
direct allocation
page read and write
3193000
heap
page read and write
1DD0000
direct allocation
page read and write
2F80000
heap
page read and write
1F8C000
direct allocation
page read and write
DD7000
unkown
page readonly
1F9E000
direct allocation
page read and write
4B70000
remote allocation
page read and write
B54000
unkown
page readonly
315E000
heap
page read and write
3112000
heap
page read and write
1CBA000
direct allocation
page read and write
1EE9000
direct allocation
page read and write
107C000
stack
page read and write
1C8E000
direct allocation
page read and write
1D45000
direct allocation
page read and write
1C9E000
direct allocation
page read and write
D1D000
unkown
page write copy
4B70000
remote allocation
page read and write
1FA4000
direct allocation
page read and write
45D000
remote allocation
page execute and read and write
1C10000
direct allocation
page read and write
1375000
heap
page read and write
1CBC000
direct allocation
page read and write
1EFA000
direct allocation
page read and write
1CEC000
direct allocation
page read and write
1ED8000
direct allocation
page read and write
2046000
direct allocation
page read and write
1CE0000
direct allocation
page read and write
B59000
unkown
page readonly
D21000
unkown
page read and write
There are 280 hidden memdumps, click here to show them.