Automated Malware Analysis IOC Report for

Details

Name:	00000044.00000002.2879684791.00000000010B7000.00000004.00000020.00020000.00000000.sdmp
TargetID:	68
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	10B7000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	0000004B.00000002.3071288970.0000000004311000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4311000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.2379026350.00000000038A8000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	38A8000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000052.00000002.3042487527.0000000000B98000.00000004.00000020.00020000.00000000.sdmp
TargetID:	82
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	B98000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000027.00000002.2500174837.0000000000BB7000.00000004.00000020.00020000.00000000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	BB7000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	0000003E.00000002.2906472397.0000000003701000.00000004.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3701000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.2077491922.0000000003C59000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3C59000
Size:	2031616

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
Public key (encryption) found	Cryptography	Archive Collected Data
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.2205364642.0000000000400000.00000040.00000400.00020000.00000000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	400000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.2296469173.0000000000F57000.00000004.00000020.00020000.00000000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	F57000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000053.00000002.3156634655.0000000003381000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3381000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000028.00000002.2600838241.0000000003F35000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3F35000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.2077491922.0000000003E4F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3E4F000
Size:	499712

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000002F.00000002.2692527886.0000000004084000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4084000
Size:	454656

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.2077491922.0000000003BD9000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3BD9000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.2205857904.0000000001338000.00000004.00000020.00020000.00000000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1338000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000036.00000002.2670350624.0000000000E98000.00000004.00000020.00020000.00000000.sdmp
TargetID:	54
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	E98000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000045.00000002.3001787354.0000000003D31000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3D31000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000020.00000002.2516986060.0000000003727000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3727000
Size:	454656

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.2308453893.00000000042E8000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	42E8000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000002E.00000002.2579241360.0000000000B68000.00000004.00000020.00020000.00000000.sdmp
TargetID:	46
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	B68000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000008.00000002.2212446199.0000000003979000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3979000
Size:	454656

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000003D.00000002.2742432457.0000000000C28000.00000004.00000020.00020000.00000000.sdmp
TargetID:	61
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	C28000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	0000004C.00000002.2974781388.0000000000BB8000.00000004.00000020.00020000.00000000.sdmp
TargetID:	76
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	BB8000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000007.00000002.4456081640.0000000001048000.00000004.00000020.00020000.00000000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1048000
Size:	176128

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000037.00000002.2770757236.0000000004234000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4234000
Size:	454656

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara detected UAC Bypass using CMSTP	Exploits
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000001F.00000002.2365812431.0000000001087000.00000004.00000020.00020000.00000000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1087000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
Yara detected Remcos RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	0000004F.00000002.3011858998.000000000322E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	79
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	322E000
Size:	8192

Details

Name:	00000028.00000002.2606190933.000000000656E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	656E000
Size:	8192

Details

Name:	00000010.00000002.2312621160.0000000006E8E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6E8E000
Size:	8192

Details

Name:	00000028.00000002.2602946948.0000000005500000.00000004.00000020.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5500000
Size:	4096

Details

Name:	0000004B.00000002.3074456398.0000000005800000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5800000
Size:	4096

Details

Name:	00000053.00000002.3131023967.00000000022ED000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	22ED000
Size:	16384

Details

Name:	00000053.00000002.3164732345.0000000005030000.00000040.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	5030000
Size:	65536

Details

Name:	00000023.00000002.2469379227.000000000331E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	331E000
Size:	8192

Details

Name:	00000049.00000002.2963305773.0000000002F9B000.00000004.00000010.00020000.00000000.sdmp
TargetID:	73
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2F9B000
Size:	20480

Details

Name:	00000053.00000002.3170339865.00000000061EB000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	61EB000
Size:	12288

Details

Name:	0000002F.00000002.2696319573.0000000005723000.00000004.00000020.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5723000
Size:	8192

Details

Name:	00000016.00000002.2384905345.0000000006550000.00000040.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6550000
Size:	65536

Details

Name:	00000000.00000002.2078414890.0000000004FD5000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4FD5000
Size:	45056

Details

Name:	0000003E.00000002.2919006017.0000000006DE1000.00000004.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	6DE1000
Size:	4096

Details

Name:	00000045.00000002.2979718464.00000000012CE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12CE000
Size:	8192

Details

Name:	00000045.00000002.3017797606.00000000072EE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	72EE000
Size:	8192

Details

Name:	00000020.00000002.2503004858.0000000002590000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2590000
Size:	4096

Details

Name:	00000045.00000002.3004120986.0000000005180000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5180000
Size:	4096

Details

Name:	00000053.00000002.3127491611.0000000000890000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	890000
Size:	12288

Details

Name:	00000028.00000002.2609467382.00000000074AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74AE000
Size:	8192

Details

Name:	0000004B.00000002.3081975295.0000000006FE0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6FE0000
Size:	65536

Details

Name:	0000003E.00000002.2910499134.0000000004BD0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4BD0000
Size:	65536

Details

Name:	0000003A.00000002.2714430849.0000000002D8E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	58
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2D8E000
Size:	8192

Details

Name:	00000025.00000002.2489820986.0000000003040000.00000004.00000020.00040000.00000000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3040000
Size:	4096

Details

Name:	0000002B.00000002.2548735596.0000000002CBE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	43
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2CBE000
Size:	8192

Details

Name:	00000045.00000002.3004120986.0000000005150000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5150000
Size:	12288

Details

Name:	0000003E.00000002.2909584819.0000000004B60000.00000004.00000020.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000010.00000002.2310408183.000000000575F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	575F000
Size:	4096

Details

Name:	00000045.00000002.3009143109.00000000062BE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	62BE000
Size:	8192

Details

Name:	00000037.00000002.2751881613.0000000003217000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3217000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000045.00000002.3017913234.00000000073EF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	73EF000
Size:	4096

Details

Name:	0000003F.00000002.2848910227.00000000006FE000.00000004.00000001.00020000.00000000.sdmp
TargetID:	63
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FE000
Size:	8192

Details

Name:	00000028.00000002.2580662213.00000000011E4000.00000004.00000020.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	11E4000
Size:	49152

Details

Name:	00000025.00000002.2490185038.00000000034DF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34DF000
Size:	4096

Details

Name:	0000004B.00000002.3071288970.00000000044AF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	44AF000
Size:	4096

Details

Name:	0000001B.00000002.2334850023.0000000002D70000.00000004.00000020.00020000.00000000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2D70000
Size:	4096

Details

Name:	00000045.00000002.2979307458.0000000001095000.00000040.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	1095000
Size:	4096

Details

Name:	00000053.00000002.3133094809.000000000237F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	237F000
Size:	12288

Details

Name:	00000053.00000002.3156634655.0000000003409000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3409000
Size:	4096

Details

Name:	0000004B.00000002.3047253124.000000000327E000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	327E000
Size:	4096

Details

Name:	0000004B.00000002.3071288970.00000000042B1000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	42B1000
Size:	32768

Details

Name:	00000045.00000002.3008010081.000000000585E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	585E000
Size:	8192

Details

Name:	0000000C.00000002.2175589734.000000000349E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	349E000
Size:	8192

Details

Name:	00000008.00000002.2205663939.00000000009AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9AE000
Size:	8192

Details

Name:	00000010.00000002.2310900041.00000000059E0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	59E0000
Size:	65536

Details

Name:	00000010.00000002.2301206289.0000000003281000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3281000
Size:	28672

Details

Name:	00000020.00000002.2500757781.0000000000996000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	996000
Size:	212992

Details

Name:	00000008.00000002.2218967203.0000000006C4E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C4E000
Size:	8192

Details

Name:	00000020.00000002.2503073033.00000000027B2000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	27B2000
Size:	102400

Details

Name:	00000020.00000002.2519824763.0000000004C00000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	4C00000
Size:	65536

Details

Name:	0000004C.00000002.2972817672.0000000000474000.00000040.00000400.00020000.00000000.sdmp
TargetID:	76
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	474000
Size:	8192

Details

Name:	0000001C.00000003.2355319694.000000000308F000.00000004.00000020.00020000.00000000.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	308F000
Size:	4096

Details

Name:	00000014.00000002.2286193240.0000000003650000.00000004.00000020.00020000.00000000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3650000
Size:	12288

Details

Name:	0000002F.00000002.2700531486.0000000006C44000.00000004.00000020.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6C44000
Size:	24576

Details

Name:	0000004B.00000002.3047118860.000000000321F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	321F000
Size:	4096

Details

Name:	00000037.00000002.2749113851.0000000002FF0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	2FF0000
Size:	65536

Details

Name:	0000002F.00000002.2697866960.0000000005A2E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A2E000
Size:	8192

Details

Name:	00000028.00000002.2607369268.00000000067ED000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	67ED000
Size:	12288

Details

Name:	00000045.00000002.3009783321.0000000006563000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6563000
Size:	32768

Details

Name:	00000010.00000002.2301206289.00000000032B9000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	32B9000
Size:	12288

Details

Name:	0000004B.00000002.3083193901.00000000079D0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	79D0000
Size:	12288

Details

Name:	00000008.00000002.2213284318.0000000004E23000.00000004.00000020.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4E23000
Size:	8192

Details

Name:	00000048.00000002.2943028153.000000000314F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	72
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	314F000
Size:	4096

Details

Name:	00000037.00000002.2751744296.00000000031CF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	31CF000
Size:	4096

Details

Name:	00000028.00000002.2607323361.00000000067AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	67AE000
Size:	8192

Details

Name:	00000053.00000002.3130854733.000000000227F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	227F000
Size:	4096

Details

Name:	00000016.00000002.2368819828.0000000000EBE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EBE000
Size:	8192

Details

Name:	00000020.00000002.2521435235.0000000005B1E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B1E000
Size:	8192

Details

Name:	0000002F.00000002.2699812602.0000000006BD8000.00000004.00000020.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6BD8000
Size:	315392

Details

Name:	00000002.00000002.2046187213.0000000002AEF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2AEF000
Size:	4096

Details

Name:	00000008.00000002.2214873319.000000000628E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	628E000
Size:	8192

Details

Name:	00000033.00000002.2659449499.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	51
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2DD0000
Size:	4096

Details

Name:	00000020.00000002.2518776439.0000000004B72000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4B72000
Size:	49152

Details

Name:	00000013.00000002.2265609613.000000000334F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	334F000
Size:	4096

Details

Name:	0000002F.00000002.2669921001.00000000012F7000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12F7000
Size:	36864

Details

Name:	00000028.00000002.2602772276.00000000054F0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	54F0000
Size:	65536

Details

Name:	00000007.00000002.4457131952.0000000002CEF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2CEF000
Size:	4096

Details

Name:	0000004B.00000002.3082506021.0000000007290000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	7290000
Size:	4096

Details

Name:	00000037.00000002.2770757236.00000000041D1000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	41D1000
Size:	32768

Details

Name:	00000053.00000002.3133094809.00000000028A7000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	28A7000
Size:	1007616

Details

Name:	00000018.00000002.2296648712.000000000108E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	108E000
Size:	8192

Details

Name:	00000037.00000002.2779616914.0000000006EA0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6EA0000
Size:	4096

Details

Name:	00000042.00000002.2867468915.0000000002A60000.00000004.00000020.00040000.00000000.sdmp
TargetID:	66
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2A60000
Size:	4096

Details

Name:	00000028.00000002.2605803201.0000000005AB0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	5AB0000
Size:	65536

Details

Name:	0000003F.00000002.2848722544.00000000001EE000.00000004.00000001.00020000.00000000.sdmp
TargetID:	63
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE000
Size:	8192

Details

Name:	0000003D.00000002.2741820438.0000000000474000.00000040.00000400.00020000.00000000.sdmp
TargetID:	61
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	474000
Size:	8192

Details

Name:	00000053.00000002.3172235931.00000000069CE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	69CE000
Size:	8192

Details

Name:	00000008.00000002.2206159988.0000000000B0B000.00000040.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	B0B000
Size:	4096

Details

Name:	0000001C.00000002.2355641389.0000000002C6E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2C6E000
Size:	8192

Details

Name:	00000011.00000002.2266631713.0000000003070000.00000004.00000020.00020000.00000000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3070000
Size:	4096

Details

Name:	00000045.00000002.3016084499.000000000728C000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	728C000
Size:	16384

Details

Name:	00000008.00000002.2207300953.0000000001010000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1010000
Size:	12288

Details

Name:	00000038.00000002.2715498232.000000000078E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	56
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	78E000
Size:	8192

Details

Name:	0000003E.00000002.2884646991.0000000002462000.00000004.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2462000
Size:	4096

Details

Name:	00000008.00000002.2217897735.000000000680E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	680E000
Size:	8192

Details

Name:	0000003F.00000002.2849803499.0000000002990000.00000004.00000020.00020000.00000000.sdmp
TargetID:	63
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2990000
Size:	40960

Details

Name:	00000016.00000002.2379026350.0000000003869000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3869000
Size:	172032

Details

Name:	00000037.00000002.2777069119.0000000006A4B000.00000004.00000020.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6A4B000
Size:	86016

Details

Name:	0000004B.00000002.3047253124.000000000328D000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	328D000
Size:	69632

Details

Name:	00000045.00000002.3005980500.00000000052F0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	52F0000
Size:	65536

Details

Name:	00000045.00000002.3011419234.00000000065E7000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	65E7000
Size:	12288

Details

Name:	00000011.00000002.2266093255.0000000002B7D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B7D000
Size:	12288

Details

Name:	00000010.00000002.2298005668.0000000001745000.00000040.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	1745000
Size:	4096

Details

Name:	00000053.00000002.3156634655.0000000003321000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3321000
Size:	32768

Details

Name:	00000037.00000002.2742191633.00000000012F7000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12F7000
Size:	36864

Details

Name:	00000008.00000002.2218110846.0000000006810000.00000004.00000020.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6810000
Size:	4096

Details

Name:	00000045.00000002.3007204543.0000000005570000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5570000
Size:	65536

Details

Name:	00000002.00000002.2045995288.000000000013D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	13D000
Size:	12288

Details

Name:	00000018.00000002.2295565023.0000000000474000.00000040.00000400.00020000.00000000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	474000
Size:	8192

Details

Name:	00000008.00000002.2213833304.0000000005A8E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A8E000
Size:	8192

Details

Name:	00000007.00000002.4455494404.0000000000471000.00000040.00000400.00020000.00000000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	471000
Size:	8192

Details

Name:	00000037.00000002.2751881613.00000000034C2000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	34C2000
Size:	4096

Details

Name:	00000045.00000002.3004120986.0000000005182000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5182000
Size:	49152

Details

Name:	00000028.00000002.2580080878.0000000001080000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1080000
Size:	4096

Details

Name:	00000028.00000002.2609348912.0000000007450000.00000004.00000020.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	7450000
Size:	4096

Details

Name:	0000004B.00000002.3076440863.0000000005E0D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5E0D000
Size:	12288

Details

Name:	0000003B.00000002.2732245898.00000000006FC000.00000004.00000010.00020000.00000000.sdmp
TargetID:	59
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6FC000
Size:	16384

Details

Name:	0000003E.00000002.2913058157.0000000005D4E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D4E000
Size:	8192

Details

Name:	00000021.00000002.2469740606.00000000030D0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	30D0000
Size:	4096

Details

Name:	00000002.00000002.2046082067.0000000000500000.00000004.00000020.00020000.00000000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	500000
Size:	4096

Details

Name:	00000037.00000002.2775857049.0000000005950000.00000004.00000020.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5950000
Size:	8192

Details

Name:	0000002F.00000002.2672893766.000000000148A000.00000004.00000020.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	148A000
Size:	20480

Details

Name:	0000004F.00000002.3011920525.00000000032AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	79
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32AE000
Size:	8192

Details

Name:	00000000.00000002.2076422823.0000000002A46000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2A46000
Size:	16384

Details

Name:	00000037.00000002.2773716030.00000000056C0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	56C0000
Size:	16384

Details

Name:	00000000.00000002.2076312860.0000000000F30000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	F30000
Size:	16384

Details

Name:	00000053.00000002.3165032278.000000000562D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	562D000
Size:	12288

Details

Name:	00000016.00000002.2379026350.0000000003A3F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3A3F000
Size:	4096

Details

Name:	0000004B.00000002.3042167260.00000000014D4000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	14D4000
Size:	270336

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000053.00000002.3123668867.0000000000777000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	777000
Size:	32768

Details

Name:	00000037.00000002.2779814345.0000000006ECE000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	6ECE000
Size:	8192

Details

Name:	00000000.00000002.2080862523.0000000007231000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	7231000
Size:	8192

Details

Name:	00000000.00000002.2079561860.000000000653D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	653D000
Size:	12288

Details

Name:	00000010.00000002.2309786293.000000000572D000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	572D000
Size:	8192

Details

Name:	0000002F.00000002.2700821636.0000000006D0E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6D0E000
Size:	8192

Details

Name:	00000010.00000002.2313989889.0000000007380000.00000004.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	7380000
Size:	4096

Details

Name:	0000001F.00000002.2365751465.0000000001010000.00000004.00000020.00040000.00000000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	0000004B.00000002.3071288970.0000000004399000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4399000
Size:	4096

Details

Name:	00000010.00000002.2296296269.00000000014A9000.00000004.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	14A9000
Size:	45056

Details

Name:	00000053.00000002.3168705190.00000000060E6000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	60E6000
Size:	40960

Details

Name:	0000002F.00000002.2674907205.0000000003059000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3059000
Size:	12288

Details

Name:	00000025.00000002.2490152267.00000000033DE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	33DE000
Size:	8192

Details

Name:	00000045.00000002.3011336246.00000000065DF000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	65DF000
Size:	20480

Details

Name:	00000053.00000002.3128240675.00000000008BA000.00000040.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	8BA000
Size:	16384

Details

Name:	0000002F.00000002.2692527886.000000000419A000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	419A000
Size:	8192

Details

Name:	00000021.00000002.2469779812.000000000313E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	313E000
Size:	8192

Details

Name:	00000000.00000002.2076541009.0000000002C21000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2C21000
Size:	4096

Details

Name:	00000016.00000002.2384072423.000000000645F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	645F000
Size:	4096

Details

Name:	00000020.00000002.2502889675.0000000000C40000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	C40000
Size:	16384

Details

Name:	00000020.00000002.2500062579.0000000000805000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	805000
Size:	16384

Details

Name:	0000002F.00000002.2700715690.0000000006C8E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C8E000
Size:	8192

Details

Name:	00000045.00000002.3006493296.0000000005410000.00000040.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page execute and read and write
Base address:	5410000
Size:	4096

Details

Name:	00000000.00000002.2078785563.00000000050D3000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	50D3000
Size:	8192

Details

Name:	00000010.00000002.2308453893.00000000043FA000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	43FA000
Size:	8192

Details

Name:	0000004B.00000002.3042167260.000000000148B000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	148B000
Size:	45056

Details

Name:	00000020.00000002.2523937467.0000000006480000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6480000
Size:	65536

Details

Name:	00000020.00000002.2522036992.0000000005F1B000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5F1B000
Size:	4096

Details

Name:	00000045.00000002.2979411552.000000000109B000.00000040.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	109B000
Size:	4096

Details

Name:	00000014.00000002.2285914462.0000000003100000.00000004.00000020.00040000.00000000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3100000
Size:	4096

Details

Name:	00000021.00000002.2469552626.0000000002BB0000.00000004.00000020.00040000.00000000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2BB0000
Size:	4096

Details

Name:	00000037.00000002.2770757236.00000000044AF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	44AF000
Size:	4096

Details

Name:	0000003B.00000003.2731777665.0000000002AC6000.00000004.00000020.00020000.00000000.sdmp
TargetID:	59
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	2AC6000
Size:	69632

Details

Name:	00000008.00000002.2206960300.0000000000DE0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	DE0000
Size:	16384

Details

Name:	00000028.00000002.2600838241.000000000404A000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	404A000
Size:	8192

Details

Name:	0000003D.00000002.2742090594.00000000007FC000.00000004.00000010.00020000.00000000.sdmp
TargetID:	61
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7FC000
Size:	16384

Details

Name:	00000028.00000002.2609504913.00000000075AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	75AE000
Size:	8192

Details

Name:	0000003E.00000002.2880006979.0000000000970000.00000004.00000020.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	970000
Size:	118784

Details

Name:	0000003A.00000002.2714692895.000000000310E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	58
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	310E000
Size:	8192

Details

Name:	0000003E.00000002.2915282845.000000000628E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	628E000
Size:	8192

Details

Name:	00000008.00000002.2216143052.0000000006516000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	6516000
Size:	40960

Details

Name:	00000008.00000002.2212446199.0000000003939000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3939000
Size:	176128

Details

Name:	00000020.00000002.2521023233.0000000004EA0000.00000040.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page execute and read and write
Base address:	4EA0000
Size:	4096

Details

Name:	00000045.00000002.3006526709.000000000547E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	547E000
Size:	8192

Details

Name:	00000049.00000003.2963133586.00000000037C0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	73
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	37C0000
Size:	4096

Details

Name:	0000003F.00000002.2848757044.00000000001F0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	63
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1F0000
Size:	4096

Details

Name:	0000003E.00000002.2917408492.00000000063B0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	63B0000
Size:	65536

Details

Name:	00000016.00000002.2380219851.0000000004848000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4848000
Size:	8192

Details

Name:	00000020.00000002.2500757781.00000000009CB000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	9CB000
Size:	12288

Details

Name:	00000016.00000002.2368944896.0000000000F20000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	F20000
Size:	65536

Details

Name:	0000004B.00000002.3045693330.0000000001682000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1682000
Size:	4096

Details

Name:	00000023.00000002.2469333772.00000000031D0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	31D0000
Size:	4096

Details

Name:	00000038.00000002.2715699101.0000000002D0F000.00000004.00000001.00020000.00000000.sdmp
TargetID:	56
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D0F000
Size:	4096

Details

Name:	0000001C.00000002.2355614422.0000000002C20000.00000004.00000020.00020000.00000000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2C20000
Size:	12288

Details

Name:	00000010.00000002.2298060596.0000000001747000.00000040.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	1747000
Size:	4096

Details

Name:	00000000.00000002.2080135940.0000000006960000.00000040.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6960000
Size:	65536

Details

Name:	00000027.00000002.2499696336.0000000000471000.00000040.00000400.00020000.00000000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	471000
Size:	8192

Details

Name:	0000002F.00000002.2697626587.00000000059D0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	59D0000
Size:	65536

Details

Name:	00000014.00000002.2286213553.0000000003660000.00000004.00000020.00020000.00000000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3660000
Size:	4096

Details

Name:	00000045.00000002.2979667456.00000000011CE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	11CE000
Size:	8192

Details

Name:	00000037.00000002.2750346477.0000000003074000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3074000
Size:	16384

Details

Name:	0000003B.00000002.2732438929.0000000002A3F000.00000004.00000001.00020000.00000000.sdmp
TargetID:	59
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A3F000
Size:	4096

Details

Name:	00000010.00000002.2295692496.000000000138E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	138E000
Size:	8192

Details

Name:	00000037.00000002.2742398299.000000000144E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	144E000
Size:	8192

Details

Name:	00000052.00000002.3042175993.0000000000B20000.00000004.00000020.00020000.00000000.sdmp
TargetID:	82
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	B20000
Size:	4096

Details

Name:	00000042.00000002.2867404112.000000000078C000.00000004.00000010.00020000.00000000.sdmp
TargetID:	66
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	78C000
Size:	16384

Details

Name:	00000037.00000002.2751568268.00000000030B0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	30B0000
Size:	4096

Details

Name:	00000045.00000002.3005548171.00000000051D0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	51D0000
Size:	65536

Details

Name:	00000050.00000003.3031121505.0000000000546000.00000004.00000020.00020000.00000000.sdmp
TargetID:	80
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	546000
Size:	69632

Details

Name:	00000048.00000002.2943003850.000000000310E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	72
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	310E000
Size:	8192

Details

Name:	0000003E.00000002.2917031178.0000000006396000.00000004.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	6396000
Size:	40960

Details

Name:	00000016.00000002.2379026350.0000000003841000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3841000
Size:	32768

Details

Name:	0000004B.00000002.3077913357.0000000006B24000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6B24000
Size:	12288

Details

Name:	00000053.00000002.3160703929.0000000004950000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4950000
Size:	4096

Details

Name:	0000004B.00000002.3073676570.00000000052B8000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	52B8000
Size:	8192

Details

Name:	00000008.00000002.2207586145.0000000002941000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2941000
Size:	24576

Details

Name:	00000053.00000002.3123250837.00000000005E6000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5E6000
Size:	12288

Details

Name:	0000002F.00000002.2694443943.00000000052FF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52FF000
Size:	4096

Details

Name:	00000016.00000002.2380330112.0000000004D28000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4D28000
Size:	8192

Details

Name:	00000048.00000002.2942631269.0000000002CAD000.00000004.00000010.00020000.00000000.sdmp
TargetID:	72
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2CAD000
Size:	12288

Details

Name:	00000000.00000002.2079212761.00000000062BF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	62BF000
Size:	4096

Details

Name:	00000014.00000002.2286022105.00000000032D0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	32D0000
Size:	20480

Details

Name:	0000003E.00000002.2915069802.0000000005FCE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5FCE000
Size:	8192

Details

Name:	00000028.00000002.2578960569.0000000000F6E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F6E000
Size:	8192

Details

Name:	00000045.00000002.3004120986.000000000517D000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	517D000
Size:	8192

Details

Name:	00000016.00000002.2368659560.0000000000E60000.00000040.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	E60000
Size:	65536

Details

Name:	0000000C.00000002.2175559889.000000000345E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	345E000
Size:	8192

Details

Name:	00000008.00000002.2216420697.000000000652E000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	652E000
Size:	8192

Details

Name:	0000002F.00000002.2692527886.0000000004049000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4049000
Size:	159744

Details

Name:	00000029.00000002.2549041514.0000000003470000.00000004.00000020.00020000.00000000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3470000
Size:	40960

Details

Name:	00000016.00000002.2367266552.0000000000BE0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	BE0000
Size:	8192

Details

Name:	0000000F.00000002.2205364642.0000000000474000.00000040.00000400.00020000.00000000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	474000
Size:	8192

Details

Name:	00000053.00000002.3165187273.000000000572E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	572E000
Size:	8192

Details

Name:	0000000D.00000002.2195595103.000000000328E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	328E000
Size:	8192

Details

Name:	0000002F.00000002.2674907205.0000000003064000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3064000
Size:	8192

Details

Name:	0000003E.00000002.2911463123.0000000004E30000.00000004.00000020.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4E30000
Size:	8192

Details

Name:	00000045.00000002.2978352393.0000000001050000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1050000
Size:	8192

Details

Name:	0000004B.00000002.3071288970.00000000042D9000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	42D9000
Size:	151552

Details

Name:	0000004B.00000002.3082326820.000000000723C000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	723C000
Size:	16384

Details

Name:	00000016.00000002.2367985887.0000000000C20000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	C20000
Size:	16384

Details

Name:	0000004B.00000002.3047253124.0000000003281000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3281000
Size:	16384

Details

Name:	00000008.00000002.2207586145.0000000002911000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2911000
Size:	192512

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000053.00000002.3123668867.0000000000680000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	680000
Size:	28672

Details

Name:	0000002F.00000002.2698761096.000000000690E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	690E000
Size:	8192

Details

Name:	0000002F.00000002.2702877488.00000000078EF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	78EF000
Size:	4096

Details

Name:	00000000.00000002.2078722601.0000000005090000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5090000
Size:	65536

Details

Name:	00000008.00000002.2213874897.0000000005C8E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5C8E000
Size:	8192

Details

Name:	0000004C.00000002.2973062413.00000000008FC000.00000004.00000010.00020000.00000000.sdmp
TargetID:	76
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8FC000
Size:	16384

Details

Name:	00000008.00000002.2213726799.00000000053CE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	53CE000
Size:	8192

Details

Name:	00000053.00000002.3156634655.000000000357F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	357F000
Size:	4096

Details

Name:	00000045.00000002.3011779825.00000000067BE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	67BE000
Size:	8192

Details

Name:	00000020.00000002.2500628742.0000000000950000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	950000
Size:	4096

Details

Name:	00000028.00000002.2580507233.00000000010C7000.00000004.00000020.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	10C7000
Size:	4096

Details

Name:	00000020.00000002.2500275385.0000000000923000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	923000
Size:	4096

Details

Name:	00000027.00000002.2500069716.0000000000B3E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B3E000
Size:	8192

Details

Name:	00000008.00000002.2212446199.0000000003911000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3911000
Size:	32768

Details

Name:	0000004B.00000002.3048064807.00000000032B1000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	32B1000
Size:	28672

Details

Name:	00000037.00000002.2742656172.000000000147E000.00000004.00000020.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	147E000
Size:	98304

Details

Name:	00000014.00000002.2286100343.000000000345B000.00000004.00000020.00020000.00000000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	345B000
Size:	40960

Details

Name:	0000003E.00000002.2918016799.000000000642E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	642E000
Size:	8192

Details

Name:	00000008.00000002.2206060741.0000000000AFA000.00000040.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	AFA000
Size:	16384

Details

Name:	00000016.00000002.2386131130.0000000006CDC000.00000004.00000010.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CDC000
Size:	16384

Details

Name:	00000000.00000002.2080447337.0000000006C80000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6C80000
Size:	241664

Details

Name:	00000053.00000002.3133039013.0000000002310000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2310000
Size:	4096

Details

Name:	00000008.00000002.2213542137.0000000004FFD000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FFD000
Size:	12288

Details

Name:	00000010.00000002.2295758075.00000000013A5000.00000004.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	13A5000
Size:	16384

Details

Name:	00000028.00000002.2600838241.00000000040EF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	40EF000
Size:	4096

Details

Name:	00000010.00000002.2298616245.00000000017E0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	17E0000
Size:	65536

Details

Name:	0000004B.00000002.3047253124.000000000326B000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	326B000
Size:	8192

Details

Name:	00000020.00000002.2523504886.000000000615E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	615E000
Size:	8192

Details

Name:	00000053.00000002.3123458535.000000000062E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	62E000
Size:	8192

Details

Name:	0000003A.00000002.2714964750.00000000035B0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	58
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	35B0000
Size:	16384

Details

Name:	00000008.00000002.2206108108.0000000000B05000.00000040.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	B05000
Size:	4096

Details

Name:	00000008.00000002.2205752388.0000000000AC0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	AC0000
Size:	8192

Details

Name:	00000000.00000002.2079677565.000000000677E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	677E000
Size:	8192

Details

Name:	00000020.00000002.2521250633.000000000599E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	599E000
Size:	8192

Details

Name:	0000004B.00000002.3077126212.000000000684E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	684E000
Size:	8192

Details

Name:	0000000D.00000002.2195719460.00000000033F0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	33F0000
Size:	40960

Details

Name:	00000008.00000002.2213649603.000000000504E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	504E000
Size:	8192

Details

Name:	00000020.00000002.2524900467.00000000065A0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	65A0000
Size:	4096

Details

Name:	00000030.00000002.2639836889.0000000002BEF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	48
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BEF000
Size:	4096

Details

Name:	00000020.00000002.2503073033.0000000002A1E000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2A1E000
Size:	2801664

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery

Details

Name:	00000008.00000002.2213085906.0000000004D80000.00000004.00000020.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4D80000
Size:	4096

Details

Name:	00000045.00000002.2981635842.0000000002D17000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2D17000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000020.00000002.2502456526.0000000000BCE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BCE000
Size:	8192

Details

Name:	00000029.00000002.2549022262.0000000003310000.00000004.00000020.00020000.00000000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3310000
Size:	24576

Details

Name:	0000004B.00000002.3079999882.0000000006D8E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6D8E000
Size:	8192

Details

Name:	00000020.00000002.2503047318.00000000026BE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	26BE000
Size:	8192

Details

Name:	00000053.00000002.3159722598.0000000004328000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4328000
Size:	8192

Details

Name:	0000000D.00000002.2195456834.0000000002DCD000.00000004.00000010.00020000.00000000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2DCD000
Size:	12288

Details

Name:	0000002F.00000002.2695721121.00000000056A5000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	56A5000
Size:	45056

Details

Name:	00000016.00000002.2369026839.0000000000F37000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	F37000
Size:	12288

Details

Name:	00000000.00000002.2080105548.0000000006940000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	6940000
Size:	53248

Details

Name:	00000037.00000002.2780854968.000000000769E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	769E000
Size:	8192

Details

Name:	00000032.00000002.2639396580.00000000006E8000.00000004.00000020.00020000.00000000.sdmp
TargetID:	50
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6E8000
Size:	24576

Details

Name:	0000003E.00000002.2879442218.00000000007FE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7FE000
Size:	8192

Details

Name:	00000045.00000002.3006802610.000000000555D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	555D000
Size:	12288

Details

Name:	00000005.00000002.2066352295.0000000002FD0000.00000004.00000020.00040000.00000000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2FD0000
Size:	4096

Details

Name:	0000002C.00000002.2569007760.0000000002A3E000.00000004.00000001.00020000.00000000.sdmp
TargetID:	44
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A3E000
Size:	8192

Details

Name:	00000000.00000002.2079438612.000000000639D000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	639D000
Size:	57344

Details

Name:	00000020.00000002.2502413658.0000000000B6B000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	B6B000
Size:	4096

Details

Name:	00000023.00000002.2469303047.000000000318E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	318E000
Size:	8192

Details

Name:	00000010.00000002.2313931777.000000000737E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	737E000
Size:	8192

Details

Name:	00000000.00000002.2076422823.0000000002A20000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2A20000
Size:	12288

Details

Name:	00000028.00000002.2583784551.0000000002E40000.00000004.00000020.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	0000002F.00000002.2698555302.000000000658F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	658F000
Size:	4096

Details

Name:	00000013.00000002.2265258622.0000000002FC0000.00000004.00000020.00040000.00000000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2FC0000
Size:	4096

Details

Name:	00000016.00000002.2386442137.0000000006F60000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6F60000
Size:	4096

Details

Name:	00000016.00000002.2384515581.0000000006536000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	6536000
Size:	40960

Details

Name:	00000010.00000002.2297639666.0000000001727000.00000004.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1727000
Size:	4096

Details

Name:	00000037.00000002.2776520922.000000000678E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	678E000
Size:	8192

Details

Name:	0000002C.00000002.2568986156.00000000027F0000.00000004.00000020.00040000.00000000.sdmp
TargetID:	44
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	27F0000
Size:	4096

Details

Name:	00000020.00000002.2516986060.00000000036C1000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	36C1000
Size:	32768

Details

Name:	0000004B.00000002.3046108830.00000000018DE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	18DE000
Size:	8192

Details

Name:	00000010.00000002.2309786293.0000000005704000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5704000
Size:	16384

Details

Name:	0000004B.00000002.3042167260.0000000001498000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	1498000
Size:	241664

Details

Name:	0000004B.00000002.3045896062.00000000016B0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	16B0000
Size:	4096

Details

Name:	0000004F.00000002.3011757708.0000000002DF0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	79
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2DF0000
Size:	16384

Details

Name:	00000046.00000002.2943798936.0000000002B3D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	70
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B3D000
Size:	12288

Details

Name:	00000020.00000002.2520573616.0000000004E6D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E6D000
Size:	12288

Details

Name:	00000010.00000002.2308453893.00000000044DF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	44DF000
Size:	4096

Details

Name:	0000004B.00000002.3047253124.0000000003264000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3264000
Size:	4096

Details

Name:	00000020.00000002.2502332569.0000000000B65000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	B65000
Size:	4096

Details

Name:	0000002E.00000002.2578955225.000000000095C000.00000004.00000010.00020000.00000000.sdmp
TargetID:	46
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	95C000
Size:	16384

Details

Name:	00000020.00000002.2524134302.00000000064A6000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	64A6000
Size:	40960

Details

Name:	00000038.00000002.2715866528.0000000002EA0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	56
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2EA0000
Size:	4096

Details

Name:	00000000.00000002.2076180505.0000000000EB0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	EB0000
Size:	4096

Details

Name:	00000000.00000002.2080386917.0000000006A10000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6A10000
Size:	4096

Details

Name:	00000010.00000002.2299697194.00000000031C8000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	31C8000
Size:	8192

Details

Name:	00000016.00000002.2386468116.0000000006F70000.00000040.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6F70000
Size:	20480

Details

Name:	00000016.00000002.2367985887.0000000000C27000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	C27000
Size:	4096

Details

Name:	00000038.00000002.2715590021.0000000002B1B000.00000004.00000020.00020000.00000000.sdmp
TargetID:	56
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2B1B000
Size:	28672

Details

Name:	00000000.00000002.2076160187.0000000000EA0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	EA0000
Size:	40960

Details

Name:	00000016.00000002.2370147215.000000000288B000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	288B000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000053.00000002.3172521732.0000000006B20000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6B20000
Size:	4096

Details

Name:	0000000D.00000002.2195497137.00000000030FC000.00000004.00000010.00020000.00000000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30FC000
Size:	16384

Details

Name:	00000016.00000002.2383026813.00000000060A2000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	60A2000
Size:	8192

Details

Name:	00000045.00000002.3009631727.0000000006504000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6504000
Size:	4096

Details

Name:	00000010.00000002.2310408183.0000000005750000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5750000
Size:	57344

Details

Name:	00000045.00000002.3008084801.000000000589E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	589E000
Size:	8192

Details

Name:	0000002F.00000002.2670791678.0000000001374000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1374000
Size:	12288

Details

Name:	00000010.00000002.2301206289.0000000003619000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3619000
Size:	3112960

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery

Details

Name:	00000044.00000002.2880119091.0000000002C30000.00000004.00000020.00020000.00000000.sdmp
TargetID:	68
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2C30000
Size:	8192

Details

Name:	00000028.00000002.2602475922.0000000004FCC000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FCC000
Size:	16384

Details

Name:	0000004B.00000002.3048064807.00000000032BC000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	32BC000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.2265583695.000000000330E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	330E000
Size:	8192

Details

Name:	00000053.00000002.3131023967.00000000022D5000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	22D5000
Size:	24576

Details

Name:	00000016.00000002.2381465938.0000000004F0E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F0E000
Size:	8192

Details

Name:	00000016.00000002.2384384409.00000000064F0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	64F0000
Size:	65536

Details

Name:	00000016.00000002.2380984667.0000000004DA0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4DA0000
Size:	4096

Details

Name:	00000020.00000002.2524657906.00000000064F0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	64F0000
Size:	65536

Details

Name:	0000003E.00000002.2912812284.00000000058CF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	58CF000
Size:	4096

Details

Name:	00000033.00000003.2659345380.00000000032D6000.00000004.00000020.00020000.00000000.sdmp
TargetID:	51
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	32D6000
Size:	65536

Details

Name:	0000001B.00000002.2334945482.0000000003100000.00000004.00000020.00020000.00000000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3100000
Size:	16384

Details

Name:	00000045.00000002.2981635842.000000000324B000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	324B000
Size:	1056768

Details

Name:	0000001C.00000002.2355594248.0000000002C10000.00000004.00000020.00020000.00000000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2C10000
Size:	4096

Details

Name:	00000000.00000002.2080774637.00000000070C0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	70C0000
Size:	4096

Details

Name:	00000028.00000002.2606109080.000000000636F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	636F000
Size:	4096

Details

Name:	00000037.00000002.2774284418.00000000056F0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	56F0000
Size:	65536

Details

Name:	00000008.00000002.2206927563.0000000000DD0000.00000040.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	DD0000
Size:	65536

Details

Name:	0000004B.00000002.3041975844.00000000013F0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	13F0000
Size:	20480

Details

Name:	00000010.00000002.2300988157.0000000003260000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3260000
Size:	28672

Details

Name:	0000004B.00000002.3079503521.0000000006BC1000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6BC1000
Size:	36864

Details

Name:	00000037.00000002.2781232416.000000007F360000.00000040.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	7F360000
Size:	4096

Details

Name:	0000000C.00000002.2175639257.0000000003528000.00000004.00000020.00020000.00000000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3528000
Size:	24576

Details

Name:	00000019.00000002.2335070736.000000000294E000.00000004.00000001.00020000.00000000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	294E000
Size:	8192

Details

Name:	00000020.00000002.2523230204.0000000005FDE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5FDE000
Size:	8192

Details

Name:	00000010.00000002.2298584754.00000000017D0000.00000040.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page execute and read and write
Base address:	17D0000
Size:	4096

Details

Name:	00000045.00000002.3013399115.0000000006E50000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6E50000
Size:	212992

Details

Name:	0000004B.00000002.3044950238.0000000001650000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1650000
Size:	12288

Details

Name:	00000054.00000002.3093779705.0000000003110000.00000004.00000020.00020000.00000000.sdmp
TargetID:	84
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3110000
Size:	12288

Details

Name:	00000045.00000002.2980784114.0000000002BB4000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2BB4000
Size:	4096

Details

Name:	00000021.00000002.2469850812.0000000003240000.00000004.00000020.00020000.00000000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3240000
Size:	36864

Details

Name:	00000010.00000002.2308453893.000000000447F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	447F000
Size:	4096

Details

Name:	0000004C.00000002.2975410877.0000000000DAE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	76
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DAE000
Size:	8192

Details

Name:	00000023.00000002.2469271018.0000000003040000.00000004.00000020.00020000.00000000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3040000
Size:	20480

Details

Name:	00000053.00000002.3122820489.000000000017A000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	17A000
Size:	24576

Details

Name:	00000037.00000002.2746020379.000000000178F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	178F000
Size:	4096

Details

Name:	00000028.00000002.2579710648.0000000001035000.00000040.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	1035000
Size:	4096

Details

Name:	00000008.00000002.2205844044.0000000000AD4000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	AD4000
Size:	12288

Details

Name:	00000005.00000003.2066188906.000000000356F000.00000004.00000020.00020000.00000000.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	356F000
Size:	4096

Details

Name:	00000016.00000002.2368539894.0000000000E37000.00000040.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	E37000
Size:	4096

Details

Name:	00000019.00000002.2335188128.0000000002BDE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BDE000
Size:	8192

Details

Name:	00000008.00000002.2206870790.0000000000D6E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D6E000
Size:	8192

Details

Name:	0000004B.00000002.3041975844.00000000013F7000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	13F7000
Size:	4096

Details

Name:	00000020.00000002.2516986060.00000000036E9000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	36E9000
Size:	172032

Details

Name:	00000045.00000002.2978452788.0000000001060000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1060000
Size:	12288

Details

Name:	00000036.00000002.2669675993.0000000000474000.00000040.00000400.00020000.00000000.sdmp
TargetID:	54
Dumpstage:	process exit
Regiontype:	remote allocation
Protect:	page execute and read and write
Base address:	474000
Size:	8192

Details

Name:	0000002F.00000002.2674907205.000000000306C000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	306C000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000002.2207300953.000000000101B000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	101B000
Size:	61440

Details

Name:	00000020.00000002.2518776439.0000000004B70000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4B70000
Size:	4096

Details

Name:	00000028.00000002.2608968338.0000000006F20000.00000004.00000020.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6F20000
Size:	4096

Details

Name:	00000020.00000002.2518296652.0000000004B06000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4B06000
Size:	40960

Details

Name:	0000003E.00000002.2913243208.0000000005ED2000.00000004.00000020.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5ED2000
Size:	8192

Details

Name:	0000002F.00000002.2673027317.000000000166D000.00000040.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	166D000
Size:	4096

Details

Name:	00000037.00000002.2777069119.0000000006A34000.00000004.00000020.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6A34000
Size:	8192

Details

Name:	00000045.00000002.3013352834.0000000006C00000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6C00000
Size:	8192

Details

Name:	00000054.00000002.3093659576.0000000002F6C000.00000004.00000020.00020000.00000000.sdmp
TargetID:	84
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2F6C000
Size:	32768

Details

Name:	00000028.00000002.2605268352.0000000005A1E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A1E000
Size:	8192

Details

Name:	00000008.00000002.2213692152.000000000534F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	534F000
Size:	4096

Details

Name:	00000016.00000002.2380557660.0000000004D30000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4D30000
Size:	16384

Details

Name:	00000037.00000002.2779448010.0000000006E90000.00000040.00000800.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6E90000
Size:	65536

Details

Name:	0000004B.00000002.3047253124.0000000003260000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3260000
Size:	12288

Details

Name:	00000000.00000002.2079044643.000000000603E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	603E000
Size:	8192

Details

Name:	00000010.00000002.2311754113.0000000006BD0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6BD0000
Size:	208896

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery

Details

Name:	00000037.00000002.2778817035.0000000006C4D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C4D000
Size:	12288

Details

Name:	00000016.00000002.2386059257.0000000006A30000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6A30000
Size:	4096

Details

Name:	0000002F.00000002.2697267130.00000000059A0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	59A0000
Size:	8192

Details

Name:	0000003E.00000002.2913177570.0000000005E98000.00000004.00000020.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5E98000
Size:	4096

Details

Name:	00000045.00000002.3005359404.00000000051BF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	51BF000
Size:	4096

Details

Name:	00000020.00000002.2525706207.0000000006C50000.00000004.00000020.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6C50000
Size:	4096

Details

Name:	0000004B.00000002.3080319612.0000000006F0E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6F0E000
Size:	8192

Details

Name:	00000008.00000002.2212446199.0000000003A8A000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3A8A000
Size:	8192

Details

Name:	0000003F.00000002.2848871116.00000000005F0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	63
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5F0000
Size:	24576

Details

Name:	00000041.00000002.2847519329.000000000047D000.00000004.00000010.00020000.00000000.sdmp
TargetID:	65
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	47D000
Size:	12288

Details

Name:	00000028.00000002.2584158243.00000000031F4000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	31F4000
Size:	2867200

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery

Details

Name:	00000016.00000002.2382020782.0000000005040000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5040000
Size:	8192

Details

Name:	0000003A.00000002.2714529251.0000000002DCF000.00000004.00000010.00020000.00000000.sdmp
TargetID:	58
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2DCF000
Size:	4096

Details

Name:	00000037.00000002.2780888256.000000000779E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	779E000
Size:	8192

Details

Name:	00000005.00000002.2066476949.00000000033FF000.00000004.00000001.00020000.00000000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33FF000
Size:	4096

Details

Name:	00000008.00000002.2213284318.0000000004E20000.00000004.00000020.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	4E20000
Size:	4096

Details

Name:	0000002C.00000002.2568928591.000000000072B000.00000004.00000010.00020000.00000000.sdmp
TargetID:	44
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	72B000
Size:	20480

Details

Name:	0000002F.00000002.2698715310.00000000068CE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	68CE000
Size:	8192

Details

Name:	0000004C.00000002.2974781388.0000000000BB0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	76
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	BB0000
Size:	24576

Details

Name:	00000053.00000002.3168230628.0000000005E6F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5E6F000
Size:	4096

Details

Name:	0000004B.00000002.3076899869.00000000065CE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	65CE000
Size:	8192

Details

Name:	00000053.00000002.3156634655.00000000035FF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	35FF000
Size:	4096

Details

Name:	00000016.00000002.2369198933.0000000002806000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2806000
Size:	16384

Details

Name:	0000002F.00000002.2692527886.0000000004109000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4109000
Size:	4096

Details

Name:	00000000.00000002.2075935875.0000000000BE0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	BE0000
Size:	16384

Details

Name:	00000049.00000002.2963387678.0000000003220000.00000004.00001000.00020000.00000000.sdmp
TargetID:	73
Dumpstage:	process exit
Regiontype:	direct allocation
Protect:	page read and write
Base address:	3220000
Size:	4096

Details

Name:	00000045.00000002.2981635842.0000000002CD1000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2CD1000
Size:	192512

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000002F.00000002.2694480875.0000000005644000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5644000
Size:	16384

Details

Name:	00000045.00000002.3009783321.0000000006594000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6594000
Size:	237568

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery

Details

Name:	0000002F.00000002.2698073970.0000000005CAE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5CAE000
Size:	8192

Details

Name:	0000003E.00000002.2910702824.0000000004C10000.00000040.00000020.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	heap
Protect:	page execute and read and write
Base address:	4C10000
Size:	4096

Details

Name:	0000003F.00000002.2848799367.00000000004FD000.00000004.00000010.00020000.00000000.sdmp
TargetID:	63
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FD000
Size:	12288

Details

Name:	00000016.00000002.2386547607.00000000070BE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	70BE000
Size:	8192

Details

Name:	00000016.00000002.2366146456.0000000000A17000.00000004.00000020.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	A17000
Size:	49152

Details

Name:	0000004B.00000002.3046342909.00000000018F0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	18F0000
Size:	65536

Details

Name:	00000008.00000002.2207300953.0000000001031000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1031000
Size:	16384

Details

Name:	0000001C.00000003.2355319694.000000000306F000.00000004.00000020.00020000.00000000.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	306F000
Size:	4096

Details

Name:	00000005.00000002.2066426215.000000000316E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	316E000
Size:	8192

Details

Name:	0000004B.00000002.3048064807.0000000003365000.00000004.00000800.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3365000
Size:	1978368

Details

Name:	0000004B.00000002.3082281161.0000000007100000.00000004.00000020.00020000.00000000.sdmp
TargetID:	75
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	7100000
Size:	4096

Details

Name:	00000053.00000002.3128974911.000000000096E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	96E000
Size:	8192

Details

Name:	00000028.00000002.2607990046.0000000006A40000.00000040.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6A40000
Size:	65536

Details

Name:	00000000.00000002.2076422823.0000000002A4D000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	2A4D000
Size:	16384

Details

Name:	00000000.00000002.2076529138.0000000002B6E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B6E000
Size:	8192

Details

Name:	00000044.00000002.2879308157.0000000000B80000.00000004.00000020.00040000.00000000.sdmp
TargetID:	68
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	B80000
Size:	4096

Details

Name:	0000002F.00000002.2695550148.0000000005690000.00000004.00000800.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5690000
Size:	28672

Details

Name:	00000014.00000002.2285826887.00000000030FB000.00000004.00000010.00020000.00000000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30FB000
Size:	20480

Details

Name:	0000003B.00000002.2732173513.00000000003E0000.00000004.00000020.00040000.00000000.sdmp
TargetID:	59
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3E0000
Size:	4096

Details

Name:	00000008.00000002.2207300953.0000000001042000.00000004.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1042000
Size:	49152

Details

Name:	00000052.00000002.3043258681.0000000002670000.00000004.00000020.00020000.00000000.sdmp
TargetID:	82
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	2670000
Size:	8192

Details

Name:	00000010.00000002.2314798010.000000007FA40000.00000040.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	7FA40000
Size:	4096

Details

Name:	00000053.00000002.3164363729.000000000501E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	501E000
Size:	8192

Details

Name:	00000020.00000002.2516986060.00000000038DF000.00000004.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	38DF000
Size:	4096

Details

Name:	00000053.00000002.3129962333.00000000009A0000.00000040.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page execute and read and write
Base address:	9A0000
Size:	4096

Details

Name:	00000010.00000002.2311071857.0000000005A80000.00000040.00000020.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap
Protect:	page execute and read and write
Base address:	5A80000
Size:	4096

Details

Name:	0000003E.00000002.2913020256.0000000005C4E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5C4E000
Size:	8192

Details

Name:	00000037.00000002.2742328323.000000000140E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	55
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	140E000
Size:	8192

Details

Name:	00000016.00000002.2380744699.0000000004D4F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	4D4F000
Size:	4096

Details

Name:	00000050.00000002.3031464762.0000000000510000.00000004.00001000.00020000.00000000.sdmp
TargetID:	80
Dumpstage:	process exit
Regiontype:	direct allocation
Protect:	page read and write
Base address:	510000
Size:	4096

Details

Name:	00000030.00000002.2639619706.000000000078E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	48
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	78E000
Size:	8192

Details

Name:	00000054.00000003.3092465940.0000000002F84000.00000004.00000020.00020000.00000000.sdmp
TargetID:	84
Dumpstage:	free memory
Regiontype:	heap
Protect:	page read and write
Base address:	2F84000
Size:	4096

Details

Name:	00000030.00000002.2639564455.0000000000700000.00000004.00000020.00040000.00000000.sdmp
TargetID:	48
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	700000
Size:	4096

Details

Name:	00000016.00000002.2368225914.0000000000D2F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D2F000
Size:	4096

Details

Name:	00000020.00000002.2499942995.00000000007AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7AE000
Size:	8192

Details

Name:	00000010.00000002.2311095492.0000000005D4F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D4F000
Size:	4096

Details

Name:	00000052.00000002.3042014251.0000000000A00000.00000004.00000020.00020000.00000000.sdmp
TargetID:	82
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	A00000
Size:	20480

Details

Name:	00000046.00000002.2944741237.000000000304F000.00000004.00000010.00020000.00000000.sdmp
TargetID:	70
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	304F000
Size:	4096

Details

Name:	00000010.00000002.2300988157.0000000003268000.00000004.00000800.00020000.00000000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	3268000
Size:	8192

Details

Name:	0000004D.00000002.3012654325.00000000036A0000.00000004.00000020.00020000.00000000.sdmp
TargetID:	77
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	36A0000
Size:	4096

Details

Name:	00000045.00000002.2979358268.0000000001097000.00000040.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	1097000
Size:	4096

Details

Name:	00000045.00000002.2979254936.0000000001092000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1092000
Size:	4096

Details

Name:	0000002F.00000002.2702050431.000000000703E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	703E000
Size:	8192

Details

Name:	00000029.00000002.2549179549.0000000003770000.00000004.00000020.00020000.00000000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	3770000
Size:	4096

Details

Name:	00000000.00000002.2078532978.0000000005000000.00000004.00000800.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	5000000
Size:	65536

Details

Name:	0000003E.00000002.2883499306.000000000243D000.00000040.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	243D000
Size:	4096

Details

Name:	00000053.00000002.3128405246.00000000008C5000.00000040.00000800.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	8C5000
Size:	4096

Details

Name:	0000002F.00000002.2698810582.0000000006A0E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6A0E000
Size:	8192

Details

Name:	00000045.00000002.2974006314.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	DDE000
Size:	98304

Details

Name:	00000000.00000002.2076336151.000000000103E000.00000004.00000010.00020000.00000000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	103E000
Size:	8192

Details

Name:	00000028.00000002.2582885289.0000000001522000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	1522000
Size:	49152

Details

Name:	00000008.00000002.2216020618.0000000006500000.00000040.00000800.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	6500000
Size:	4096

Details

Name:	00000008.00000002.2206222319.0000000000BB3000.00000004.00000020.00020000.00000000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	BB3000
Size:	217088

Details

Name:	00000030.00000002.2639517127.00000000006FD000.00000004.00000010.00020000.00000000.sdmp
TargetID:	48
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6FD000
Size:	12288

Details

Name:	0000003E.00000002.2906472397.000000000397F000.00000004.00000800.00020000.00000000.sdmp
TargetID:	62
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	397F000
Size:	4096

Details

Name:	00000045.00000002.2979459610.00000000010B0000.00000004.00000800.00020000.00000000.sdmp
TargetID:	69
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page read and write
Base address:	10B0000
Size:	4096

Details

Name:	00000020.00000002.2500474675.000000000093D000.00000040.00000800.00020000.00000000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	trusted library allocation
Protect:	page execute and read and write
Base address:	93D000
Size:	4096

Details

Name:	0000002F.00000002.2699812602.0000000006BBF000.00000004.00000020.00020000.00000000.sdmp
TargetID:	47
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	6BBF000
Size:	40960

Details

Name:	00000028.00000002.2607285015.00000000066AE000.00000004.00000010.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	66AE000
Size:	8192

Details

Name:	00000053.00000002.3166598045.0000000005CA8000.00000004.00000020.00020000.00000000.sdmp
TargetID:	83
Dumpstage:	process exit
Regiontype:	heap
Protect:	page read and write
Base address:	5CA8000
Size:	45056

Details

Name:	00000028.00000002.2600838241.0000000003FB9000.00000004.00000800.00020000.00000000.sdmp
TargetID:	40
Dumpstage:	process exit

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
Order_YK240612-01D(estimate).scr.exe

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC ReportOrder_YK240612-01D(estimate).scr.exe

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

IOC Report
Order_YK240612-01D(estimate).scr.exe