IOC Report
3lOLt0TUE4.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\3lOLt0TUE4.exe
"C:\Users\user\Desktop\3lOLt0TUE4.exe"
 malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
26CF000
stack
page read and write
140000000
unkown
page readonly
140070000
unkown
page readonly
2780000
direct allocation
page read and write
14F000
stack
page read and write
451000
direct allocation
page execute and read and write
78F000
stack
page read and write
140070000
unkown
page readonly
4C7000
heap
page read and write
14004C000
unkown
page readonly
460000
direct allocation
page read and write
2440000
direct allocation
page read and write
2720000
direct allocation
page read and write
140065000
unkown
page read and write
88E000
stack
page read and write
14D000
stack
page read and write
14006A000
unkown
page readonly
4C0000
heap
page read and write
140001000
unkown
page execute read
140000000
unkown
page readonly
28B0000
heap
page read and write
470000
heap
page read and write
28B8000
heap
page read and write
14004C000
unkown
page readonly
140065000
unkown
page write copy
2080000
direct allocation
page read and write
2030000
direct allocation
page read and write
140001000
unkown
page execute read
1A0000
heap
page read and write
140071000
unkown
page execute and write copy
400000
direct allocation
page execute and read and write
1C0000
heap
page read and write
140072000
unkown
page execute and read and write
4F3000
heap
page read and write
25CE000
stack
page read and write
2700000
heap
page read and write
140071000
unkown
page execute and write copy
14006A000
unkown
page readonly
190000
heap
page read and write
There are 29 hidden memdumps, click here to show them.