IOC Report
MbYnGuRGnm.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\MbYnGuRGnm.exe
C:\Users\user\Desktop\MbYnGuRGnm.exe
malicious

URLs

Name
IP
Malicious
http://nsis.sf.net/NSIS_Error
unknown
http://nsis.sf.net/NSIS_ErrorError
unknown

Memdumps

Base Address
Regiontype
Protect
Malicious
400000
unkown
page readonly
2309000
heap
page read and write
5DE000
stack
page read and write
645000
heap
page read and write
62C000
heap
page read and write
2300000
heap
page read and write
400000
unkown
page readonly
441000
unkown
page read and write
422000
unkown
page read and write
2305000
heap
page read and write
610000
heap
page read and write
645000
heap
page read and write
63D000
heap
page read and write
618000
heap
page read and write
5500000
trusted library allocation
page read and write
641000
heap
page read and write
64E000
heap
page read and write
648000
heap
page read and write
644000
heap
page read and write
401000
unkown
page execute read
274F000
stack
page read and write
80E000
stack
page read and write
2250000
heap
page read and write
94F000
stack
page read and write
595000
heap
page read and write
431000
unkown
page read and write
5E0000
heap
page read and write
288F000
stack
page read and write
84E000
stack
page read and write
4120000
heap
page read and write
54F0000
heap
page read and write
98E000
stack
page read and write
663000
heap
page read and write
9A000
stack
page read and write
278E000
stack
page read and write
22A0000
heap
page read and write
648000
heap
page read and write
401000
unkown
page execute read
408000
unkown
page write copy
590000
heap
page read and write
66B000
heap
page read and write
641000
heap
page read and write
19A000
stack
page read and write
408000
unkown
page read and write
458000
unkown
page readonly
22A4000
heap
page read and write
458000
unkown
page readonly
A8F000
stack
page read and write
22EE000
stack
page read and write
4B0000
heap
page read and write
There are 40 hidden memdumps, click here to show them.