IOC Report
OlympusViewer-win2-4-1.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\OlympusViewer-win2-4-1.exe
"C:\Users\user\Desktop\OlympusViewer-win2-4-1.exe"

Memdumps

Base Address
Regiontype
Protect
Malicious
420C000
unkown
page readonly
528000
heap
page read and write
1A0C000
unkown
page readonly
380C000
unkown
page readonly
528000
heap
page read and write
1001000
unkown
page execute read
516000
heap
page read and write
50D000
heap
page read and write
513000
heap
page read and write
515000
heap
page read and write
420C000
unkown
page readonly
513000
heap
page read and write
2E0C000
unkown
page readonly
528000
heap
page read and write
516000
heap
page read and write
528000
heap
page read and write
511000
heap
page read and write
513000
heap
page read and write
513000
heap
page read and write
516000
heap
page read and write
528000
heap
page read and write
513000
heap
page read and write
513000
heap
page read and write
100C000
unkown
page readonly
515000
heap
page read and write
560C000
unkown
page readonly
4C0C000
unkown
page readonly
528000
heap
page read and write
528000
heap
page read and write
2E0C000
unkown
page readonly
1000000
unkown
page readonly
240C000
unkown
page readonly
515000
heap
page read and write
50E000
heap
page read and write
511000
heap
page read and write
515000
heap
page read and write
511000
heap
page read and write
240C000
unkown
page readonly
50E000
heap
page read and write
513000
heap
page read and write
528000
heap
page read and write
513000
heap
page read and write
528000
heap
page read and write
513000
heap
page read and write
1A0C000
unkown
page readonly
380C000
unkown
page readonly
100C000
unkown
page readonly
100A000
unkown
page write copy
513000
heap
page read and write
528000
heap
page read and write
There are 40 hidden memdumps, click here to show them.