IOC Report
#U8f6f#U4ef6#U5b89#U88c5#U7a0b#U5e8f_uninstc.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\#U8f6f#U4ef6#U5b89#U88c5#U7a0b#U5e8f_uninstc.exe
"C:\Users\user\Desktop\#U8f6f#U4ef6#U5b89#U88c5#U7a0b#U5e8f_uninstc.exe"
 malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
22EA8893000
heap
page read and write
22EA8870000
heap
page read and write
D1C835B000
stack
page read and write
22EA8840000
heap
page read and write
22EA8813000
heap
page read and write
22EA8882000
heap
page read and write
22EA8AB0000
heap
page read and write
22EA8875000
heap
page read and write
22EA8A30000
heap
page read and write
22EA888E000
heap
page read and write
7FF6F9071000
unkown
page execute read
22EA8875000
heap
page read and write
22EA8ABA000
heap
page read and write
22EABE00000
trusted library allocation
page read and write
22EA8882000
heap
page read and write
22EA8810000
heap
page read and write
22EA8866000
heap
page read and write
7FF6F9119000
unkown
page readonly
22EA886F000
heap
page read and write
7FF6F9114000
unkown
page write copy
22EA8AB5000
heap
page read and write
22EA887A000
heap
page read and write
7FF6F9119000
unkown
page readonly
7FF6F9113000
unkown
page write copy
7FF6F9113000
unkown
page read and write
22EA8875000
heap
page read and write
22EA8790000
heap
page read and write
7FF6F9070000
unkown
page readonly
22EA8852000
heap
page read and write
7FF6F9146000
unkown
page readonly
7FF6F9071000
unkown
page execute read
22EA87B0000
heap
page read and write
22EA889B000
heap
page read and write
7FF6F90E9000
unkown
page readonly
22EA888B000
heap
page read and write
22EA8877000
heap
page read and write
22EA887A000
heap
page read and write
22EA884C000
heap
page read and write
22EA8846000
heap
page read and write
22EA8873000
heap
page read and write
22EA8870000
heap
page read and write
7FF6F9146000
unkown
page readonly
D1C86FE000
stack
page read and write
7FF6F9070000
unkown
page readonly
22EA86B0000
heap
page read and write
7FF6F9116000
unkown
page read and write
D1C87FE000
stack
page read and write
22EA8866000
heap
page read and write
7FF6F90E9000
unkown
page readonly
22EA887D000
heap
page read and write
22EAA260000
heap
page read and write
22EA886F000
heap
page read and write
There are 42 hidden memdumps, click here to show them.