Automated Malware Analysis IOC Report for

Details

Name:	00000003.00000003.375381174.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000003.361826559.000001B866181000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866181000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000C.00000000.429733559.00000000006E2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E2000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Found malware configuration	AV Detection
Yara detected AsyncRAT	Key, Mouse, Clipboard, Microphone and Screen Capturing, Boot Survival, Malware Analysis System Evasion, Lowering of HIPS / PFW / Operating System Security Settings	Scheduled Task/Job Obfuscated Files or Information

Details

Name:	00000003.00000003.434132652.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.386399141.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.418513533.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000002.599389764.00000000000A2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A2000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000000.364575966.00000000000A2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A2000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000001.00000000.355914114.00000000001D2000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D2000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.431917812.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.404397604.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000001.00000003.360210292.0000000000696000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000002.00000002.599254975.0000000000082000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	82000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000C.00000002.599252774.00000000006E2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E2000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Yara detected AsyncRAT	Key, Mouse, Clipboard, Microphone and Screen Capturing, Boot Survival, Malware Analysis System Evasion, Lowering of HIPS / PFW / Operating System Security Settings	Scheduled Task/Job Obfuscated Files or Information

Details

Name:	00000000.00000003.361022264.000001B86606A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86606A000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000F.00000002.518251485.0000000000400000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	360448

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000003.00000003.416270861.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.407415597.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000002.00000002.608644673.00000000028C1000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28C1000
Size:	233472

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
May infect USB drives	Spreading	Replication Through Removable Media
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.379800367.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.409647935.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000003.361732058.000001B8660A7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8660A7000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.429703452.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000D.00000002.609034784.0000000003021000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3021000
Size:	1024000

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.363543444.000001B865F71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F71000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000D.00000002.599349965.00000000008A2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A2000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Yara signature match	System Summary
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.611737671.0000000004021000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4021000
Size:	483328

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000003.00000003.384190622.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.420692346.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000008.00000000.392012717.0000000000A72000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A72000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000002.600750205.00000000006AA000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6AA000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.422988044.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.397417022.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000E.00000002.513995957.0000000000400000.00000040.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information

Details

Name:	00000002.00000002.611403829.00000000039DF000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	39DF000
Size:	2285568

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Yara signature match	System Summary
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
URLs found in memory or binary data	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000001.00000002.365445146.00000000001D2000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D2000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.388634565.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000C.00000002.601243946.0000000002AF1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF1000
Size:	200704

Signature Hits	Behavior Group	Mitre Attack
Yara detected AsyncRAT	Key, Mouse, Clipboard, Microphone and Screen Capturing, Boot Survival, Malware Analysis System Evasion, Lowering of HIPS / PFW / Operating System Security Settings	Scheduled Task/Job Obfuscated Files or Information
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.381975904.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.390816638.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.414035813.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000000D.00000000.490757263.00000000008A2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A2000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000003.00000003.399625080.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000008.00000002.395800979.0000000000A72000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A72000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000003.363508087.000001B865F8D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F8D000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.425183434.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.377587214.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.411854151.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.519777905.00000000006B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B0000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.427394879.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.401942814.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000003.00000003.436364231.00000000006AD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000003.369408079.000001B867140000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867140000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000002.00000000.360863456.0000000000082000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	82000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Njrat	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000001.00000003.357963237.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000D.00000002.613494442.0000000005AA0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	20480

Details

Name:	00000002.00000002.599738662.00000000005F5000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	5F5000
Size:	16384

Details

Name:	0000000F.00000003.517556800.0000000002129000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2129000
Size:	4096

Details

Name:	00000000.00000003.331392604.000001B865C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C71000
Size:	352256

Details

Name:	0000000F.00000002.518846244.000000000212D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	212D000
Size:	8192

Details

Name:	0000000F.00000003.516774798.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	00000003.00000003.368184547.000000001B00C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B00C000
Size:	16384

Details

Name:	00000003.00000003.365530130.0000000000673000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	00000001.00000002.369475197.000000001B130000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B130000
Size:	634880

Details

Name:	0000000D.00000002.616436413.00000000084FE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84FE000
Size:	8192

Details

Name:	00000008.00000002.397155462.000000001BDAE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BDAE000
Size:	8192

Details

Name:	00000000.00000002.370688831.0000001D3A1FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3A1FD000
Size:	12288

Details

Name:	00000008.00000000.392001869.0000000000A70000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A70000
Size:	4096

Details

Name:	00000000.00000002.370626727.0000001D39CFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D39CFF000
Size:	4096

Details

Name:	00000000.00000003.370113078.000001B86620A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86620A000
Size:	4096

Details

Name:	00000003.00000003.384415859.00000000006AC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AC000
Size:	8192

Details

Name:	00000003.00000003.374133799.0000000000694000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	4096

Details

Name:	0000000D.00000003.511380213.0000000008110000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8110000
Size:	61440

Details

Name:	00000003.00000002.610829032.000000001B0E4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0E4000
Size:	20480

Details

Name:	0000000D.00000003.493397113.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000002.376034957.00007FF5C6962000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6962000
Size:	49152

Details

Name:	0000000C.00000002.599308319.000000000078D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	78D000
Size:	12288

Details

Name:	00000001.00000003.357401682.0000000000673000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	0000000D.00000002.601805812.000000000103A000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	103A000
Size:	12288

Details

Name:	00000000.00000003.333493936.000001B86600F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86600F000
Size:	122880

Details

Name:	0000000D.00000003.500193139.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000008.00000003.393472143.000000001B930000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B930000
Size:	65536

Details

Name:	0000000D.00000002.616673617.000000007F9F0000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7F9F0000
Size:	4096

Details

Name:	0000000D.00000003.497162763.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	0000000B.00000002.600549130.0000022951DE1000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22951DE1000
Size:	323584

Details

Name:	00000000.00000003.340032917.000001B866BB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866BB3000
Size:	356352

Details

Name:	00000008.00000002.396099023.0000000000FAB000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	FAB000
Size:	53248

Details

Name:	0000000D.00000003.492172483.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000003.342518986.000001B865F92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F92000
Size:	49152

Details

Name:	0000000F.00000003.517621429.0000000002131000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	4096

Details

Name:	00000000.00000003.370284319.000001B8665E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E7000
Size:	32768

Details

Name:	00000001.00000003.358125100.000000000068F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68F000
Size:	4096

Details

Name:	00000008.00000003.394339170.0000000000FEC000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FEC000
Size:	20480

Details

Name:	00000000.00000003.369059890.000001B865BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB2000
Size:	4096

Details

Name:	0000000C.00000002.610960209.00000000050B4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50B4000
Size:	32768

Details

Name:	0000000D.00000003.497138223.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	00000000.00000003.369352461.000001B867338000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867338000
Size:	4096

Details

Name:	00000000.00000003.332848907.000001B8662E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8662E0000
Size:	237568

Details

Name:	00000002.00000002.599307079.0000000000180000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	180000
Size:	8192

Details

Name:	00000001.00000002.368740273.0000000002410000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2410000
Size:	3371008

Details

Name:	00000003.00000003.373936349.0000000000696000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	12288

Details

Name:	0000000C.00000003.519315826.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	0000000C.00000002.600807119.0000000001520000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1520000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000000.00000003.331708974.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000003.00000002.611230983.00007FFD0676A000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0676A000
Size:	4096

Details

Name:	00000000.00000003.341931573.000001B86604C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86604C000
Size:	376832

Details

Name:	00000003.00000003.368227725.000000001AF90000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF90000
Size:	65536

Details

Name:	0000000C.00000003.451716293.0000000005990000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5990000
Size:	16384

Details

Name:	00000000.00000002.375327485.00007FF5C6256000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6256000
Size:	8192

Details

Name:	00000000.00000003.342191443.000001B865F9E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9E000
Size:	69632

Details

Name:	00000002.00000003.427557835.0000000005740000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5740000
Size:	2621440

Details

Name:	0000000C.00000002.610746899.0000000005046000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5046000
Size:	163840

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.370343604.000001B865C8C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C8C000
Size:	20480

Details

Name:	00000003.00000003.367951956.000000001AFA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AFA0000
Size:	4096

Details

Name:	00000000.00000002.373537654.000001B865E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865E70000
Size:	4096

Details

Name:	00000000.00000003.331999140.000001B8669AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8669AD000
Size:	1056768

Details

Name:	0000000D.00000003.493447125.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000010.00000002.610228753.00007FF5CFCDA000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFCDA000
Size:	16384

Details

Name:	00000003.00000003.367840033.00000000006C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C5000
Size:	16384

Details

Name:	00000000.00000003.336101819.000001B865C7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7A000
Size:	8192

Details

Name:	00000003.00000003.369009096.000000000067B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000002.00000002.600572650.0000000000796000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	796000
Size:	241664

Details

Name:	0000000D.00000003.492427957.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000010.00000002.599362555.000000677AA7E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677AA7E000
Size:	8192

Details

Name:	0000000D.00000002.602017425.0000000001115000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1115000
Size:	8192

Details

Name:	00000001.00000002.368587894.0000000000AE5000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	AE5000
Size:	16384

Details

Name:	00000010.00000002.603275015.000001D3FCC60000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC60000
Size:	65536

Details

Name:	0000000D.00000003.493735979.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000001.00000002.368050117.0000000000690000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	690000
Size:	323584

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000D.00000003.511638066.0000000008160000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8160000
Size:	65536

Details

Name:	0000000D.00000003.505383313.0000000001168000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1168000
Size:	28672

Details

Name:	0000000C.00000003.452531324.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	57344

Details

Name:	0000000D.00000003.494728435.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000002.00000003.433439944.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000000.00000002.373420169.000001B865BB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB4000
Size:	16384

Details

Name:	0000000F.00000003.516214660.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000C.00000003.451669423.0000000005990000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5990000
Size:	57344

Details

Name:	0000000D.00000003.491812209.00000000010F7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10F7000
Size:	49152

Details

Name:	0000000D.00000002.602698524.00000000013A0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13A0000
Size:	45056

Details

Name:	00000010.00000002.602171871.000001D3FBCFE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBCFE000
Size:	12288

Details

Name:	00000003.00000003.373517904.000000001B1C0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B1C0000
Size:	16384

Details

Name:	0000000D.00000003.492477690.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000003.00000003.368712864.000000001AF50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF50000
Size:	65536

Details

Name:	00000003.00000003.373277870.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	118784

Details

Name:	0000000C.00000002.602244974.0000000002B61000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B61000
Size:	4096

Details

Name:	00000003.00000003.368652497.00000000021A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21A0000
Size:	65536

Details

Name:	0000000C.00000003.582627668.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	45056

Details

Name:	00000001.00000002.365639688.0000000000410000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	410000
Size:	16384

Details

Name:	0000000C.00000003.550941685.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	0000000D.00000002.602219817.000000000114E000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	114E000
Size:	49152

Details

Name:	0000000D.00000003.497578375.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	00000000.00000003.340301351.000001B866019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866019000
Size:	417792

Details

Name:	00000001.00000002.369674458.00007FFD0669A000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0669A000
Size:	4096

Details

Name:	00000001.00000002.369722203.00007FFD0675D000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0675D000
Size:	4096

Details

Name:	0000000F.00000003.516411074.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000002.604134879.0000000002C80000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C80000
Size:	65536

Details

Name:	0000000B.00000002.608591205.00007FF57E657000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E657000
Size:	12288

Details

Name:	00000000.00000002.375784775.00007FF5C68E1000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C68E1000
Size:	8192

Details

Name:	00000000.00000003.331517715.000001B865B81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B81000
Size:	122880

Details

Name:	00000003.00000003.373229921.0000000000698000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	698000
Size:	4096

Details

Name:	00000000.00000003.340103041.000001B86619F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86619F000
Size:	32768

Details

Name:	0000000F.00000003.515215303.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	811008

Details

Name:	0000000D.00000003.499368785.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	32768

Details

Name:	0000000D.00000003.496679151.0000000005AC0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC0000
Size:	4096

Details

Name:	00000000.00000003.341315199.000001B865FB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FB2000
Size:	20480

Details

Name:	00000001.00000003.358231369.000000001B050000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B050000
Size:	57344

Details

Name:	00000000.00000003.331481401.000001B865B74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B74000
Size:	24576

Details

Name:	00000000.00000003.370083619.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	32768

Details

Name:	0000000B.00000002.600630991.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	53248

Details

Name:	0000000F.00000003.515997963.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000002.613320606.00000000058C0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	58C0000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000D.00000003.495826063.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	16384

Details

Name:	0000000D.00000003.493043516.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000010.00000003.516247222.000001D3FD180000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD180000
Size:	28672

Details

Name:	00000000.00000003.368695116.000001B865C84000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C84000
Size:	4096

Details

Name:	00000000.00000002.376391303.00007FF5C6A2B000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6A2B000
Size:	16384

Details

Name:	0000000C.00000002.599714758.0000000000C9B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C9B000
Size:	4096

Details

Name:	0000000D.00000002.612905065.00000000056DE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56DE000
Size:	8192

Details

Name:	00000010.00000002.602685326.000001D3FC402000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC402000
Size:	4096

Details

Name:	00000000.00000003.342698689.000001B8665BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665BF000
Size:	196608

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.339980094.000001B866179000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866179000
Size:	32768

Details

Name:	0000000D.00000002.604514649.0000000002CE0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2CE0000
Size:	3371008

Details

Name:	00000000.00000002.371361089.000001B863D49000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D49000
Size:	36864

Details

Name:	0000000C.00000002.600371107.0000000000EE4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EE4000
Size:	4096

Details

Name:	00000000.00000003.332097566.000001B866903000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866903000
Size:	696320

Details

Name:	00000002.00000002.602711233.0000000002580000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2580000
Size:	3371008

Details

Name:	00000000.00000003.339215296.000001B86602C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602C000
Size:	4096

Details

Name:	0000000D.00000003.497786364.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	0000000D.00000002.613472387.0000000005A90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	4096

Details

Name:	00000000.00000002.375991848.00007FF5C6956000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6956000
Size:	12288

Details

Name:	00000010.00000002.609819260.00007FF5CF5A3000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF5A3000
Size:	4096

Details

Name:	00000003.00000003.368594007.000000001AF60000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF60000
Size:	65536

Details

Name:	00000002.00000003.405140857.00000000051A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A0000
Size:	65536

Details

Name:	00000010.00000002.609898105.00007FF5CF7C9000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF7C9000
Size:	8192

Details

Name:	00000001.00000002.368663150.00000000023BB000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	23BB000
Size:	86016

Details

Name:	0000000F.00000002.518225666.0000000000369000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	369000
Size:	8192

Details

Name:	0000000E.00000002.513959663.000000000009D000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	0000000D.00000003.501255481.0000000005C80000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C80000
Size:	65536

Details

Name:	00000000.00000003.334199770.000001B865B82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B82000
Size:	4096

Details

Name:	00000008.00000002.397176256.00007FF4C8E50000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FF4C8E50000
Size:	4096

Details

Name:	00000010.00000002.599770071.000000677B37F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B37F000
Size:	4096

Details

Name:	0000000D.00000002.613371666.000000000596C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	596C000
Size:	16384

Details

Name:	0000000B.00000002.607816697.0000022952BB0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22952BB0000
Size:	4096

Details

Name:	0000000C.00000002.600594771.0000000000F50000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F50000
Size:	16384

Details

Name:	00000008.00000003.393888568.000000000102A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	00000000.00000003.370353618.000001B865C72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C72000
Size:	20480

Details

Name:	0000000B.00000002.608238530.00007FF57E4C1000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E4C1000
Size:	4096

Details

Name:	00000008.00000002.395827699.0000000000AA0000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	AA0000
Size:	16384

Details

Name:	0000000C.00000003.452559838.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	00000001.00000003.357919331.000000001B040000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B040000
Size:	65536

Details

Name:	00000002.00000002.613675448.00000000053E0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	53E0000
Size:	12288

Details

Name:	0000000C.00000002.612694352.0000000005CEE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CEE000
Size:	8192

Details

Name:	0000000F.00000002.518580762.0000000000530000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	4096

Details

Name:	0000000D.00000002.601758562.0000000001022000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1022000
Size:	45056

Details

Name:	0000000D.00000003.496191657.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.504562645.0000000001166000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1166000
Size:	8192

Details

Name:	00000001.00000002.369697465.00007FFD066E4000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066E4000
Size:	4096

Details

Name:	00000000.00000002.374016036.000001B8665F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665F2000
Size:	16384

Details

Name:	0000000C.00000002.599632758.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	00000010.00000002.602818780.000001D3FC601000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC601000
Size:	4096

Details

Name:	00000001.00000002.368695800.00000000023F0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23F0000
Size:	4096

Details

Name:	0000000D.00000002.600224599.0000000000B9D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B9D000
Size:	4096

Details

Name:	00000003.00000003.373718349.000000001B120000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B120000
Size:	65536

Details

Name:	00000000.00000003.342842425.000001B866C08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C08000
Size:	8192

Details

Name:	00000000.00000003.341325537.000001B865F98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F98000
Size:	8192

Details

Name:	0000000D.00000002.613562525.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	61440

Details

Name:	00000010.00000002.610627614.00007FF5CFEF1000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFEF1000
Size:	8192

Details

Name:	00000001.00000002.369617767.000000001B7CB000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B7CB000
Size:	20480

Details

Name:	0000000D.00000003.499863849.0000000005AEA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEA000
Size:	4096

Details

Name:	0000000D.00000003.500333734.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	16384

Details

Name:	00000002.00000003.439928014.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000010.00000002.602436857.000001D3FC280000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC280000
Size:	4096

Details

Name:	00000010.00000003.516288030.000001D3FD18E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD18E000
Size:	73728

Details

Name:	00000000.00000003.340138339.000001B8661CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661CE000
Size:	40960

Details

Name:	00000001.00000002.369602252.000000001B5CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B5CE000
Size:	8192

Details

Name:	0000000D.00000002.615940862.0000000007C1B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7C1B000
Size:	20480

Details

Name:	00000000.00000002.375815443.00007FF5C6910000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6910000
Size:	8192

Details

Name:	00000008.00000003.392934490.0000000001043000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1043000
Size:	24576

Details

Name:	00000010.00000002.609084222.000001D3FD2C0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2C0000
Size:	4096

Details

Name:	0000000C.00000003.452733753.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000000.00000002.376286477.00007FF5C69F7000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C69F7000
Size:	32768

Details

Name:	00000008.00000003.393948859.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	102400

Details

Name:	0000000B.00000003.426545727.0000022951E7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7E000
Size:	4096

Details

Name:	0000000D.00000003.499458353.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Details

Name:	0000000D.00000003.500494759.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000003.00000003.368406476.000000001AFC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AFC0000
Size:	65536

Details

Name:	0000000F.00000003.517899420.000000000211B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211B000
Size:	4096

Details

Name:	00000001.00000002.368490586.0000000000A10000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	A10000
Size:	4096

Details

Name:	00000010.00000002.602699251.000001D3FC415000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC415000
Size:	4096

Details

Name:	0000000D.00000003.493059968.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000003.497819884.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	0000000C.00000003.548787524.0000000000C9B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9B000
Size:	4096

Details

Name:	00000002.00000002.613657305.0000000005320000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5320000
Size:	4096

Details

Name:	0000000D.00000002.612540091.00000000051AE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51AE000
Size:	8192

Details

Name:	0000000C.00000003.580602786.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	0000000C.00000003.451705546.0000000005990000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5990000
Size:	12288

Details

Name:	0000000C.00000002.599641651.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	188416

Details

Name:	0000000D.00000003.493798623.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000002.00000002.599699498.00000000005D0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D0000
Size:	4096

Details

Name:	0000000C.00000003.451263070.0000000000C23000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C23000
Size:	61440

Details

Name:	00000003.00000003.373300006.00000000006A9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A9000
Size:	81920

Details

Name:	00000000.00000002.375866135.00007FF5C6924000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6924000
Size:	8192

Details

Name:	0000000D.00000003.511655788.0000000008150000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8150000
Size:	53248

Details

Name:	00000003.00000003.373909030.000000001B100000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B100000
Size:	65536

Details

Name:	0000000D.00000003.499974012.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	20480

Details

Name:	00000000.00000002.373838303.000001B8661D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661D5000
Size:	77824

Details

Name:	00000001.00000003.358183801.0000000000AD0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	AD0000
Size:	65536

Details

Name:	0000000D.00000002.599927792.0000000000922000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	922000
Size:	16384

Details

Name:	0000000D.00000002.616299548.0000000008260000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8260000
Size:	4096

Details

Name:	00000001.00000003.357711720.000000001B0C0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0C0000
Size:	4096

Details

Name:	0000000D.00000002.616016517.0000000007C20000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7C20000
Size:	12288

Details

Name:	0000000D.00000003.500397312.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000003.00000003.373623860.000000001B160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B160000
Size:	65536

Details

Name:	00000000.00000003.332654937.000001B86644F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86644F000
Size:	544768

Details

Name:	00000000.00000003.340835595.000001B863D52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D52000
Size:	524288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.493229107.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	4096

Details

Name:	00000010.00000002.599849598.000000677B7FC000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B7FC000
Size:	16384

Details

Name:	00000010.00000002.599566663.000000677AEFE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677AEFE000
Size:	8192

Details

Name:	0000000D.00000002.600048515.0000000000B82000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B82000
Size:	4096

Details

Name:	00000003.00000003.369278689.000000001AF20000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF20000
Size:	65536

Details

Name:	00000000.00000003.339313381.000001B865FB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FB4000
Size:	364544

Details

Name:	0000000D.00000002.612696648.000000000531E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	531E000
Size:	8192

Details

Name:	00000000.00000003.369534363.000001B867320000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B867320000
Size:	4096

Details

Name:	00000001.00000003.358054832.0000000000678000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	678000
Size:	4096

Details

Name:	00000000.00000003.369040964.000001B865B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9C000
Size:	4096

Details

Name:	00000003.00000002.599960054.00000000004F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F0000
Size:	4096

Details

Name:	0000000C.00000003.451302217.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	40960

Details

Name:	00000002.00000002.613926621.000000000587E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	587E000
Size:	8192

Details

Name:	0000000C.00000003.451813076.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	0000000C.00000002.612720307.0000000005DED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DED000
Size:	12288

Details

Name:	0000000C.00000002.602003707.0000000002B3D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B3D000
Size:	4096

Details

Name:	0000000D.00000003.494037467.0000000005ACC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACC000
Size:	8192

Details

Name:	00000000.00000002.371673513.000001B863E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863E00000
Size:	12288

Details

Name:	0000000D.00000002.602839951.00000000013C0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	13C0000
Size:	36864

Details

Name:	00000000.00000003.341063579.000001B865FA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA0000
Size:	12288

Details

Name:	00000010.00000002.599731690.000000677B27F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B27F000
Size:	4096

Details

Name:	00000000.00000003.370306049.000001B865F77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F77000
Size:	36864

Details

Name:	00000000.00000003.340111274.000001B866189000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866189000
Size:	20480

Details

Name:	00000000.00000002.376370695.00007FF5C6A26000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6A26000
Size:	16384

Details

Name:	00000000.00000003.369120101.000001B865B92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B92000
Size:	4096

Details

Name:	0000000D.00000003.496165416.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	36864

Details

Name:	0000000D.00000003.501819204.00000000077A1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77A1000
Size:	110592

Details

Name:	00000003.00000003.373403569.00000000006CA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CA000
Size:	28672

Details

Name:	00000000.00000002.374755417.000001B866F40000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866F40000
Size:	1269760

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000003.00000003.369228157.000000001AF50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF50000
Size:	65536

Details

Name:	0000000D.00000003.499136266.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	24576

Details

Name:	0000000D.00000003.493214042.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	0000000E.00000003.513872115.0000000000B93000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B93000
Size:	8192

Details

Name:	0000000D.00000003.493310998.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000F.00000003.517856863.000000000212D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	212D000
Size:	8192

Details

Name:	00000001.00000002.369220435.0000000002751000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2751000
Size:	122880

Details

Name:	0000000D.00000003.494240688.0000000005ABD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABD000
Size:	4096

Details

Name:	0000000D.00000003.495950343.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	8192

Details

Name:	00000000.00000003.333511695.000001B865FDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FDB000
Size:	212992

Details

Name:	0000000D.00000002.612755714.000000000545E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	545E000
Size:	8192

Details

Name:	0000000D.00000003.493611243.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000003.548638785.0000000000C54000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	16384

Details

Name:	0000000C.00000002.600512461.0000000000F17000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F17000
Size:	4096

Details

Name:	0000000D.00000003.492463312.0000000005AAE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAE000
Size:	4096

Details

Name:	00000000.00000003.331716777.000001B865BAE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BAE000
Size:	57344

Details

Name:	0000000D.00000003.499966489.0000000005AE2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE2000
Size:	8192

Details

Name:	0000000D.00000002.616515676.000000000853E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	853E000
Size:	8192

Details

Name:	0000000D.00000002.615124070.000000000744E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	744E000
Size:	8192

Details

Name:	00000000.00000002.373737504.000001B866170000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866170000
Size:	69632

Details

Name:	00000000.00000003.339303910.000001B865F71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F71000
Size:	53248

Details

Name:	00000000.00000003.340285485.000001B8665EF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665EF000
Size:	65536

Details

Name:	00000010.00000002.610053152.00007FF5CFC15000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC15000
Size:	8192

Details

Name:	00000008.00000003.392568117.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	00000000.00000003.339268859.000001B865F7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F7E000
Size:	81920

Details

Name:	00000010.00000002.610528103.00007FF5CFE6A000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE6A000
Size:	24576

Details

Name:	0000000D.00000003.494580107.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	12288

Details

Name:	00000008.00000003.394078543.000000001B8B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8B0000
Size:	65536

Details

Name:	0000000F.00000003.516618748.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000003.495961823.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	8192

Details

Name:	00000000.00000003.369110553.000001B865B8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B8A000
Size:	4096

Details

Name:	00000000.00000003.370062498.000001B866016000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866016000
Size:	12288

Details

Name:	0000000C.00000002.601149728.0000000002ADD000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ADD000
Size:	12288

Details

Name:	0000000D.00000002.612799507.000000000555E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	555E000
Size:	8192

Details

Name:	0000000D.00000002.609396948.0000000003128000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3128000
Size:	12288

Details

Name:	0000000C.00000002.602209717.0000000002B5B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B5B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000010.00000002.599839687.000000677B6FF000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B6FF000
Size:	4096

Details

Name:	0000000D.00000003.500103685.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000000.00000002.373440163.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000000.00000003.340087918.000001B86617E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86617E000
Size:	12288

Details

Name:	00000002.00000003.413913031.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	4096

Details

Name:	0000000D.00000003.493653549.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000003.00000003.368930527.000000001AF00000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF00000
Size:	65536

Details

Name:	0000000D.00000003.498430292.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Details

Name:	0000000D.00000003.500142500.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000003.00000003.368981122.0000000000673000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	0000000F.00000003.516762955.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	0000000D.00000003.492761709.0000000005AAE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAE000
Size:	4096

Details

Name:	00000002.00000003.496149223.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	0000000C.00000002.611853491.00000000055F5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55F5000
Size:	4096

Details

Name:	0000000C.00000002.611215152.0000000005110000.00000040.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5110000
Size:	4096

Details

Name:	0000000F.00000003.516906045.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000010.00000003.524360960.000001D3FD4AF000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD4AF000
Size:	4096

Details

Name:	00000003.00000002.600372273.000000000062F000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	62F000
Size:	36864

Details

Name:	00000002.00000002.599325684.00000000001D0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D0000
Size:	16384

Details

Name:	0000000D.00000003.500557261.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000010.00000002.609004313.000001D3FD274000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD274000
Size:	4096

Details

Name:	00000000.00000002.370637360.0000001D39DFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D39DFE000
Size:	8192

Details

Name:	00000002.00000003.461615514.0000000005B00000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B00000
Size:	2621440

Details

Name:	0000000F.00000002.518712114.0000000000930000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	00000001.00000003.357729776.0000000000A20000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A20000
Size:	65536

Details

Name:	0000000C.00000002.612959766.000000000673F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	673F000
Size:	4096

Details

Name:	0000000D.00000003.497455742.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	0000000B.00000003.421149911.0000022951E1E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E1E000
Size:	8192

Details

Name:	00000000.00000003.370188845.000001B865F99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F99000
Size:	4096

Details

Name:	0000000D.00000003.494895964.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000000.00000002.374679970.000001B866EF0000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866EF0000
Size:	69632

Details

Name:	00000000.00000002.375448080.00007FF5C6606000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6606000
Size:	12288

Details

Name:	00000003.00000003.384398321.00000000006B5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B5000
Size:	24576

Details

Name:	0000000D.00000003.504551253.000000000115F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	115F000
Size:	20480

Details

Name:	00000002.00000002.600222729.00000000006EB000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6EB000
Size:	180224

Details

Name:	00000001.00000003.358071268.000000000068F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68F000
Size:	4096

Details

Name:	00000008.00000002.397144559.000000001BCAF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BCAF000
Size:	4096

Details

Name:	0000000B.00000002.599268926.0000006F81AF9000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F81AF9000
Size:	28672

Details

Name:	0000000D.00000003.495185096.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000000.00000002.375638957.00007FF5C6778000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6778000
Size:	4096

Details

Name:	00000001.00000003.358013586.0000000000673000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	0000000C.00000003.442826961.00000000050D0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50D0000
Size:	12288

Details

Name:	0000000D.00000003.499895416.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	24576

Details

Name:	0000000F.00000003.516684238.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	00000003.00000002.600145705.0000000000580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	580000
Size:	4096

Details

Name:	0000000B.00000003.426690874.00000229528F0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229528F0000
Size:	4096

Details

Name:	00000000.00000003.340530632.000001B8665BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665BF000
Size:	196608

Details

Name:	0000000D.00000003.494286292.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000010.00000002.603144664.000001D3FCC50000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC50000
Size:	65536

Details

Name:	0000000D.00000003.498935428.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	20480

Details

Name:	00000002.00000003.413927784.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	00000002.00000002.600855427.0000000000A1E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A1E000
Size:	8192

Details

Name:	0000000D.00000003.494326901.0000000005ACC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACC000
Size:	8192

Details

Name:	00000010.00000002.610408887.00007FF5CFE17000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE17000
Size:	8192

Details

Name:	00000003.00000003.374416260.0000000000694000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	4096

Details

Name:	00000010.00000000.515679924.00007FF5CFF47000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF47000
Size:	16384

Details

Name:	0000000D.00000003.496969432.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	8192

Details

Name:	0000000C.00000003.486978257.0000000006C90000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	16384

Details

Name:	00000002.00000003.470267241.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000000.00000002.375424171.00007FF5C65B9000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C65B9000
Size:	8192

Details

Name:	00000008.00000003.393896382.000000000102F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102F000
Size:	4096

Details

Name:	0000000D.00000003.493378191.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000008.00000002.397270736.00007FFD0678D000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0678D000
Size:	4096

Details

Name:	00000002.00000003.509121597.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000000.00000002.375482204.00007FF5C6705000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6705000
Size:	8192

Details

Name:	0000000C.00000003.452956735.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	0000000D.00000002.613458199.0000000005A8E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A8E000
Size:	8192

Details

Name:	00000000.00000003.363122698.000001B865FAD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAD000
Size:	8192

Details

Name:	00000002.00000003.407401070.00000000054F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54F0000
Size:	2621440

Details

Name:	0000000C.00000003.451080945.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	40960

Details

Name:	0000000D.00000003.500766181.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	0000000C.00000003.451799394.0000000005C40000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	40960

Details

Name:	0000000D.00000003.492675632.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	0000000D.00000003.492996613.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000010.00000002.602956371.000001D3FCC30000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC30000
Size:	65536

Details

Name:	0000000D.00000003.500686464.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	0000000B.00000003.426638730.0000022951E7C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7C000
Size:	4096

Details

Name:	00000010.00000002.599449806.000000677ABF7000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677ABF7000
Size:	36864

Details

Name:	0000000D.00000003.493908958.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000002.609362978.0000000003122000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3122000
Size:	12288

Details

Name:	00000003.00000003.365912154.000000000067B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	94208

Details

Name:	0000000D.00000002.609507334.0000000003140000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	4505600

Details

Name:	00000008.00000002.397285027.00007FFD067F2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD067F2000
Size:	28672

Details

Name:	00000008.00000002.396002798.0000000000F10000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F10000
Size:	4096

Details

Name:	0000000D.00000003.498622380.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	20480

Details

Name:	0000000D.00000003.499851506.0000000005AE7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE7000
Size:	16384

Details

Name:	0000000D.00000003.496944356.0000000005AB3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB3000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.600469390.0000000000F06000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F06000
Size:	8192

Details

Name:	0000000D.00000002.616404358.00000000083FD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	83FD000
Size:	12288

Details

Name:	0000000D.00000003.493927003.0000000005ABC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABC000
Size:	4096

Details

Name:	0000000C.00000002.611298390.000000000539D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	539D000
Size:	12288

Details

Name:	00000000.00000003.341041340.000001B8661DD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661DD000
Size:	20480

Details

Name:	0000000D.00000003.494318613.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	0000000F.00000003.516111645.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	0000000D.00000003.498683420.0000000005ADF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADF000
Size:	4096

Details

Name:	00000008.00000000.392033953.0000000000A84000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A84000
Size:	4096

Details

Name:	0000000D.00000003.498321623.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000001.00000002.369735869.00007FFD067C0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD067C0000
Size:	4096

Details

Name:	00000008.00000003.393829424.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000D.00000003.501486742.0000000001102000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1102000
Size:	45056

Details

Name:	0000000C.00000003.451731370.0000000005990000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5990000
Size:	16384

Details

Name:	00000003.00000003.369343356.0000000000673000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	00000000.00000003.365544084.000001B865F98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F98000
Size:	8192

Details

Name:	00000002.00000003.362660976.00000000023A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23A0000
Size:	36864

Details

Name:	0000000B.00000002.599223721.0000006F81A79000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F81A79000
Size:	28672

Details

Name:	0000000C.00000002.610988420.00000000050BE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50BE000
Size:	4096

Details

Name:	0000000D.00000003.492978332.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000010.00000002.599322480.000000677A7FB000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677A7FB000
Size:	20480

Details

Name:	0000000B.00000002.608021964.00007FF56353B000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF56353B000
Size:	12288

Details

Name:	00000000.00000002.373392071.000001B865B92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B92000
Size:	4096

Details

Name:	00000000.00000003.369554089.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	0000000F.00000003.517765317.0000000002131000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	4096

Details

Name:	00000002.00000003.379456972.00000000023AC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23AC000
Size:	16384

Details

Name:	00000001.00000002.368509729.0000000000A40000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A40000
Size:	36864

Details

Name:	00000000.00000003.369686709.000001B865F4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F4D000
Size:	4096

Details

Name:	0000000B.00000002.600714467.0000022951EE0000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22951EE0000
Size:	4096

Details

Name:	00000000.00000003.339855382.000001B8665E4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E4000
Size:	45056

Details

Name:	0000000B.00000002.608159323.00007FF57DE9D000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DE9D000
Size:	4096

Details

Name:	00000002.00000003.439920210.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	4096

Details

Name:	00000000.00000003.342673260.000001B8665AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665AF000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000D.00000003.492926174.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000003.00000003.369199474.000000001AEE0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEE0000
Size:	65536

Details

Name:	0000000D.00000003.492713597.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	0000000D.00000003.493843826.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000003.370047168.000001B865FAE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAE000
Size:	4096

Details

Name:	00000008.00000002.396279048.00000000011E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11E4000
Size:	16384

Details

Name:	0000000C.00000003.452797142.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	12288

Details

Name:	0000000D.00000002.601880844.000000000105B000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	105B000
Size:	4096

Details

Name:	00000010.00000002.610076726.00007FF5CFC1F000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC1F000
Size:	4096

Details

Name:	00000010.00000002.609668144.000001D3FD4B6000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD4B6000
Size:	8192

Details

Name:	00000008.00000003.394285956.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	4096

Details

Name:	00000010.00000002.599813998.000000677B4FA000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B4FA000
Size:	24576

Details

Name:	00000000.00000003.332553952.000001B866571000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866571000
Size:	581632

Details

Name:	0000000D.00000003.499323589.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	32768

Details

Name:	00000001.00000003.360229950.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Details

Name:	0000000C.00000003.580649039.0000000000C99000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	0000000D.00000003.497966450.0000000005AA4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA4000
Size:	106496

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.517163872.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	4096

Details

Name:	0000000D.00000002.601421498.000000000101A000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	101A000
Size:	8192

Details

Name:	00000001.00000003.358047065.00000000006B6000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B6000
Size:	12288

Details

Name:	0000000F.00000002.518816486.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	00000001.00000003.357874347.000000001B080000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B080000
Size:	65536

Details

Name:	00000008.00000003.393214887.000000001BA00000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BA00000
Size:	61440

Details

Name:	00000000.00000003.342012966.000001B8661DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661DC000
Size:	106496

Details

Name:	0000000D.00000003.498397093.0000000005ADA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	16384

Details

Name:	00000000.00000002.374337011.000001B866DC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866DC0000
Size:	8192

Details

Name:	00000008.00000003.394236151.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	00000000.00000003.361891056.000001B863DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DF3000
Size:	65536

Details

Name:	00000001.00000002.369429335.000000001B080000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B080000
Size:	16384

Details

Name:	0000000D.00000003.499103459.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000003.00000003.368964145.000000000068C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	16384

Details

Name:	00000002.00000002.599285423.000000000011B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11B000
Size:	20480

Details

Name:	00000001.00000003.358200907.000000001B070000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B070000
Size:	65536

Details

Name:	0000000D.00000002.601208618.0000000000FC0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	FC0000
Size:	16384

Details

Name:	00000003.00000002.611281924.00007FFD067D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD067D0000
Size:	4096

Details

Name:	0000000C.00000003.452941965.00000000057B0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	4096

Details

Name:	00000003.00000003.373422047.00000000006CA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CA000
Size:	28672

Details

Name:	00000000.00000002.373350366.000001B865B70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B70000
Size:	12288

Details

Name:	0000000D.00000002.601814876.0000000001042000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1042000
Size:	4096

Details

Name:	00000001.00000003.357646159.00000000006BE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BE000
Size:	12288

Details

Name:	00000010.00000002.599867753.000001D380000000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D380000000
Size:	4096

Details

Name:	00000002.00000002.599362067.00000000001E0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1E0000
Size:	4096

Details

Name:	00000010.00000002.602199021.000001D3FBD02000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBD02000
Size:	45056

Details

Name:	00000001.00000003.357406085.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	94208

Details

Name:	00000000.00000003.341134243.000001B865FB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FB2000
Size:	20480

Details

Name:	0000000C.00000003.580730117.00000000050B3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B3000
Size:	36864

Details

Name:	0000000C.00000003.452743330.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000010.00000002.602405649.000001D3FC270000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FC270000
Size:	4096

Details

Name:	00000003.00000003.373206768.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	20480

Details

Name:	00000008.00000003.393326545.000000001B960000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B960000
Size:	65536

Details

Name:	00000000.00000003.340017010.000001B8661DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661DC000
Size:	24576

Details

Name:	00000003.00000003.373416236.00000000006D6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D6000
Size:	4096

Details

Name:	0000000C.00000002.600715253.0000000001180000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1180000
Size:	20480

Details

Name:	00000010.00000002.609484909.000001D3FD454000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD454000
Size:	49152

Details

Name:	0000000D.00000003.495772579.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	36864

Details

Name:	0000000F.00000003.516020165.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	0000000D.00000002.601824615.000000000104A000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	104A000
Size:	4096

Details

Name:	00000002.00000003.448169538.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000000.00000002.373466301.000001B865C74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C74000
Size:	12288

Details

Name:	00000008.00000002.397277612.00007FFD067B2000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD067B2000
Size:	4096

Details

Name:	00000003.00000002.599520427.00000000000B4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B4000
Size:	4096

Details

Name:	00000010.00000002.609425009.000001D3FD43D000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD43D000
Size:	49152

Details

Name:	00000000.00000003.367956243.000001B863D48000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D48000
Size:	90112

Details

Name:	00000000.00000003.369528251.000001B867100000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B867100000
Size:	4096

Details

Name:	00000000.00000003.342852088.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	0000000D.00000003.494813848.0000000005AA2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA2000
Size:	94208

Details

Name:	0000000E.00000002.514026228.0000000000420000.00000002.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	420000
Size:	806912

Details

Name:	00000001.00000002.368617001.0000000002390000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2390000
Size:	20480

Details

Name:	00000000.00000003.369127141.000001B865B94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B94000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.493220605.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000003.500610425.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000000.00000003.340147425.000001B8661DB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661DB000
Size:	4096

Details

Name:	00000010.00000002.608937791.000001D3FD250000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD250000
Size:	4096

Details

Name:	0000000D.00000003.505408247.00000000077DB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77DB000
Size:	40960

Details

Name:	0000000E.00000002.514266080.0000000000BA0000.00000002.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	BA0000
Size:	32768

Details

Name:	00000000.00000003.331547145.000001B865C90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C90000
Size:	716800

Details

Name:	00000000.00000002.373572537.000001B865F70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F70000
Size:	4096

Details

Name:	00000010.00000002.602262709.000001D3FBD13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBD13000
Size:	12288

Details

Name:	00000000.00000003.333606535.000001B863DF5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DF5000
Size:	118784

Details

Name:	00000000.00000003.339794999.000001B8665A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665A0000
Size:	57344

Details

Name:	00000000.00000003.339407396.000001B865FB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FB6000
Size:	356352

Details

Name:	00000002.00000002.613247204.0000000004DC0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	4DC0000
Size:	4096

Details

Name:	0000000D.00000003.495761465.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	00000001.00000003.358352831.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	00000003.00000003.367901205.0000000000690000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	690000
Size:	139264

Details

Name:	0000000D.00000003.498035468.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.500369791.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000008.00000003.393355965.000000001B980000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B980000
Size:	65536

Details

Name:	00000010.00000002.609024879.000001D3FD284000.00000008.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page write copy
Base address:	1D3FD284000
Size:	8192

Details

Name:	0000000D.00000003.504690255.00000000077D4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77D4000
Size:	61440

Details

Name:	00000010.00000002.610123820.00007FF5CFC44000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC44000
Size:	4096

Details

Name:	0000000D.00000002.614596058.0000000006CC0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6CC0000
Size:	45056

Details

Name:	0000000F.00000003.517270145.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	4096

Details

Name:	00000000.00000003.332798486.000001B86631A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86631A000
Size:	479232

Details

Name:	00000000.00000003.369157557.000001B865BBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BBD000
Size:	16384

Details

Name:	0000000D.00000003.494407963.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000010.00000002.609050467.000001D3FD290000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD290000
Size:	4096

Details

Name:	0000000D.00000002.600284700.0000000000BA6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BA6000
Size:	4096

Details

Name:	00000001.00000002.368559280.0000000000AC4000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AC4000
Size:	16384

Details

Name:	00000000.00000003.342544489.000001B865F8D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F8D000
Size:	16384

Details

Name:	0000000D.00000003.493854427.0000000005AA2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA2000
Size:	81920

Details

Name:	00000008.00000003.394261718.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	4096

Details

Name:	00000010.00000003.516409242.000001D3FD1C4000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1C4000
Size:	4096

Details

Name:	00000008.00000002.396391321.0000000001235000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1235000
Size:	8192

Details

Name:	0000000D.00000003.492306836.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000003.00000003.367750272.0000000000693000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	693000
Size:	90112

Details

Name:	0000000C.00000002.611319212.00000000053DE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53DE000
Size:	8192

Details

Name:	0000000D.00000003.498199260.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	24576

Details

Name:	0000000D.00000003.495940106.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	0000000D.00000003.493149436.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	4096

Details

Name:	0000000C.00000003.452950056.00000000057BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57BC000
Size:	4096

Details

Name:	00000000.00000003.339643192.000001B8665E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E3000
Size:	49152

Details

Name:	00000002.00000003.405345686.00000000053E4000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E4000
Size:	4096

Details

Name:	00000000.00000002.374490806.000001B866E90000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866E90000
Size:	294912

Details

Name:	00000002.00000002.600952646.0000000000A80000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	A80000
Size:	16384

Details

Name:	00000001.00000002.369684827.00007FFD0669C000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0669C000
Size:	4096

Details

Name:	0000000E.00000002.514284193.00000000022E0000.00000002.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22E0000
Size:	3371008

Details

Name:	0000000D.00000003.496140573.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	0000000C.00000003.451034229.0000000000C00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C00000
Size:	360448

Details

Name:	00000010.00000002.610176097.00007FF5CFC7E000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC7E000
Size:	4096

Details

Name:	0000000C.00000003.452779013.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	12288

Details

Name:	00000010.00000002.599496885.000000677ACFD000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677ACFD000
Size:	12288

Details

Name:	00000002.00000002.613502044.0000000005060000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5060000
Size:	4096

Details

Name:	0000000F.00000003.516663977.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000003.495172421.0000000005AB5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB5000
Size:	16384

Details

Name:	00000003.00000003.384392020.00000000006AC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AC000
Size:	8192

Details

Name:	00000001.00000000.355928847.00000000001E4000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E4000
Size:	4096

Details

Name:	0000000C.00000003.450524654.0000000000C82000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C82000
Size:	118784

Details

Name:	00000000.00000003.368991228.000001B865B79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B79000
Size:	49152

Details

Name:	0000000F.00000003.518092424.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	4096

Details

Name:	00000001.00000002.369649674.00007FFD06682000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06682000
Size:	8192

Details

Name:	0000000F.00000003.516370079.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000C.00000003.452551985.0000000005C40000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	12288

Details

Name:	00000001.00000002.368684357.00000000023E0000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	23E0000
Size:	16384

Details

Name:	0000000D.00000003.500732147.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	0000000D.00000003.492382371.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000001.00000002.369692022.00007FFD066AF000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066AF000
Size:	4096

Details

Name:	0000000D.00000002.613744346.0000000005C50000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C50000
Size:	20480

Details

Name:	00000000.00000003.369172991.000001B865EC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865EC6000
Size:	360448

Details

Name:	0000000D.00000002.615167339.000000000758E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	758E000
Size:	8192

Details

Name:	00000000.00000002.374000053.000001B8665E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E5000
Size:	8192

Details

Name:	00000001.00000003.357326608.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	81920

Details

Name:	00000002.00000002.613528763.0000000005100000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5100000
Size:	16384

Details

Name:	0000000C.00000000.429751839.00000000006EE000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EE000
Size:	4096

Details

Name:	0000000F.00000002.518347616.0000000000460000.00000002.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	460000
Size:	806912

Details

Name:	0000000C.00000002.613059649.000000007F680000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7F680000
Size:	4096

Details

Name:	00000010.00000002.610418992.00007FF5CFE20000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE20000
Size:	8192

Details

Name:	00000000.00000002.373492967.000001B865C89000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C89000
Size:	4096

Details

Name:	0000000B.00000002.608258823.00007FF57E4D1000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E4D1000
Size:	16384

Details

Name:	0000000D.00000003.495351034.0000000005AB7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB7000
Size:	8192

Details

Name:	0000000D.00000003.492792079.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000001.00000002.369704293.00007FFD06742000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06742000
Size:	4096

Details

Name:	0000000C.00000003.487083347.0000000000C9E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	4096

Details

Name:	00000000.00000002.374388421.000001B866E50000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866E50000
Size:	16384

Details

Name:	00000002.00000002.613601918.0000000005170000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5170000
Size:	69632

Details

Name:	0000000D.00000003.495386405.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	0000000C.00000003.486921208.0000000006C60000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C60000
Size:	4096

Details

Name:	00000000.00000003.369151226.000001B865BB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB4000
Size:	16384

Details

Name:	00000001.00000003.358058595.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	73728

Details

Name:	00000003.00000003.374819935.00000000006AA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AA000
Size:	4096

Details

Name:	00000000.00000002.373672481.000001B865FAD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAD000
Size:	4096

Details

Name:	0000000D.00000003.499018452.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.499733267.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000002.00000002.613107594.00000000049D9000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	49D9000
Size:	4096

Details

Name:	00000003.00000003.373780396.00000000021F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F0000
Size:	65536

Details

Name:	00000003.00000003.373368747.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	147456

Details

Name:	00000010.00000002.610292061.00007FF5CFD03000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFD03000
Size:	4096

Details

Name:	0000000D.00000003.494386651.0000000005ACD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACD000
Size:	4096

Details

Name:	00000000.00000002.373430594.000001B865BBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BBD000
Size:	16384

Details

Name:	00000010.00000003.516839794.000001D3FD2E0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2E0000
Size:	4096

Details

Name:	00000000.00000003.332461265.000001B8665FF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665FF000
Size:	606208

Details

Name:	00000000.00000003.337535005.000001B866DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866DB0000
Size:	4096

Details

Name:	0000000C.00000003.451161405.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	98304

Details

Name:	00000001.00000003.358509605.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	00000003.00000003.369144680.000000000068C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	94208

Details

Name:	00000000.00000003.340158428.000001B8661F3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661F3000
Size:	12288

Details

Name:	00000010.00000002.610023691.00007FF5CFC08000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC08000
Size:	4096

Details

Name:	00000000.00000003.340075737.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	00000001.00000002.368622993.0000000002397000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2397000
Size:	12288

Details

Name:	00000003.00000003.373441601.00000000006A5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A5000
Size:	126976

Details

Name:	00000003.00000002.600047352.0000000000540000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	540000
Size:	4096

Details

Name:	00000010.00000002.609680559.000001D3FD600000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD600000
Size:	40960

Details

Name:	0000000B.00000003.426435449.0000022951E8E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E8E000
Size:	57344

Details

Name:	00000001.00000003.358111688.0000000000677000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	677000
Size:	4096

Details

Name:	00000008.00000003.393941687.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	0000000D.00000003.500599765.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	00000000.00000003.370379404.000001B865C8C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C8C000
Size:	20480

Details

Name:	0000000D.00000003.500081068.0000000005ADF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADF000
Size:	12288

Details

Name:	0000000B.00000002.607797553.0000022952BA0000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22952BA0000
Size:	4096

Details

Name:	00000000.00000002.373592942.000001B865F7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F7D000
Size:	12288

Details

Name:	0000000C.00000003.548677569.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	0000000B.00000000.420772344.00007FF56353B000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF56353B000
Size:	12288

Details

Name:	0000000D.00000003.497026876.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	8192

Details

Name:	00000010.00000002.601079621.000001D3FBC56000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC56000
Size:	4096

Details

Name:	00000000.00000002.371332848.000001B863D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D46000
Size:	8192

Details

Name:	0000000F.00000002.518589561.0000000000540000.00000002.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	540000
Size:	16384

Details

Name:	0000000D.00000003.506997973.000000000116B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	116B000
Size:	16384

Details

Name:	00000002.00000003.502636580.0000000005980000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5980000
Size:	2621440

Details

Name:	00000010.00000002.600630176.000001D3FBC00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC00000
Size:	73728

Details

Name:	00000000.00000002.376250198.00007FF5C69ED000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C69ED000
Size:	12288

Details

Name:	00000000.00000003.369076619.000001B865BBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BBD000
Size:	16384

Details

Name:	0000000C.00000002.610931559.00000000050A5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50A5000
Size:	53248

Details

Name:	0000000E.00000002.514016572.0000000000418000.00000040.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	418000
Size:	12288

Details

Name:	00000002.00000003.427510050.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000C.00000003.451844092.0000000005A00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A00000
Size:	65536

Details

Name:	00000000.00000002.376220379.00007FF5C69E7000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C69E7000
Size:	20480

Details

Name:	00000002.00000003.384673371.0000000004A00000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A00000
Size:	53248

Details

Name:	00000003.00000002.611247419.00007FFD0676D000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0676D000
Size:	4096

Details

Name:	0000000D.00000002.616282467.0000000008250000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8250000
Size:	4096

Details

Name:	00000000.00000003.342532323.000001B8665EF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665EF000
Size:	65536

Details

Name:	0000000D.00000003.500377718.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.602005107.0000000002200000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2200000
Size:	8192

Details

Name:	0000000C.00000003.443035676.0000000005100000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5100000
Size:	61440

Details

Name:	00000003.00000003.374543745.000000000069C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69C000
Size:	32768

Details

Name:	00000000.00000003.343084577.000001B865D3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D3F000
Size:	184320

Details

Name:	0000000F.00000003.515476578.0000000000910000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	910000
Size:	122880

Details

Name:	00000001.00000002.367572342.0000000000600000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	600000
Size:	45056

Details

Name:	00000003.00000003.369326410.000000000067B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	69632

Details

Name:	0000000D.00000003.492785241.0000000005AAE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAE000
Size:	4096

Details

Name:	0000000F.00000002.518790742.00000000020F0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0000
Size:	4096

Details

Name:	00000002.00000002.599432541.00000000002C1000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C1000
Size:	4096

Details

Name:	00000008.00000003.392885864.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	00000010.00000002.608844540.000001D3FD070000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD070000
Size:	4096

Details

Name:	0000000C.00000003.519368688.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	77824

Details

Name:	0000000C.00000003.452119208.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	65536

Details

Name:	00000000.00000002.375653266.00007FF5C677B000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C677B000
Size:	4096

Details

Name:	00000008.00000003.393499991.000000001B920000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B920000
Size:	65536

Details

Name:	00000008.00000002.395815351.0000000000A84000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A84000
Size:	4096

Details

Name:	00000000.00000002.376051695.00007FF5C6976000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6976000
Size:	16384

Details

Name:	0000000D.00000002.616043512.0000000007C30000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7C30000
Size:	4096

Details

Name:	0000000F.00000003.517831134.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	0000000F.00000003.517119938.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	4096

Details

Name:	00000002.00000002.599237487.0000000000080000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	80000
Size:	4096

Details

Name:	00000008.00000003.392642827.0000000001000000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1000000
Size:	4096

Details

Name:	0000000D.00000003.497897650.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	00000003.00000003.365558478.000000000067B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	81920

Details

Name:	00000001.00000003.357812949.000000001B0D0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0D0000
Size:	65536

Details

Name:	00000001.00000002.368723604.0000000002400000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2400000
Size:	8192

Details

Name:	0000000D.00000002.601137244.0000000000E70000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E70000
Size:	16384

Details

Name:	0000000D.00000002.602757954.00000000013B0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	13B0000
Size:	24576

Details

Name:	0000000C.00000002.601928647.0000000002B32000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B32000
Size:	20480

Details

Name:	0000000D.00000003.498896976.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000002.00000002.613906534.00000000056FE000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56FE000
Size:	8192

Details

Name:	0000000D.00000003.499817196.0000000005AEA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEA000
Size:	4096

Details

Name:	0000000D.00000003.493235652.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000002.600332757.0000000000BAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BAF000
Size:	4096

Details

Name:	00000003.00000003.367859355.00000000006B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B9000
Size:	12288

Details

Name:	00000000.00000002.373813875.000001B8661A3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661A3000
Size:	16384

Details

Name:	0000000D.00000003.493986956.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000010.00000002.599916888.000001D3FBB30000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FBB30000
Size:	806912

Details

Name:	0000000C.00000002.612053633.0000000005780000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5780000
Size:	16384

Details

Name:	0000000C.00000002.599753995.0000000000CE0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CE0000
Size:	4096

Details

Name:	00000010.00000002.599755235.000000677B2FF000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B2FF000
Size:	4096

Details

Name:	0000000D.00000003.494168129.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000001.00000002.368185300.0000000000700000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	700000
Size:	806912

Details

Name:	00000000.00000003.369031643.000001B865B94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B94000
Size:	16384

Details

Name:	0000000B.00000002.599529874.0000022951CC0000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22951CC0000
Size:	806912

Details

Name:	00000002.00000002.613486170.0000000005050000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5050000
Size:	12288

Details

Name:	0000000D.00000002.612608359.00000000052B0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	52B0000
Size:	8192

Details

Name:	0000000D.00000001.490853747.00000000008A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A0000
Size:	4096

Details

Name:	0000000F.00000003.517754120.000000000212D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	212D000
Size:	8192

Details

Name:	00000000.00000003.368874654.000001B865B92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B92000
Size:	4096

Details

Name:	00000002.00000003.405163364.0000000005100000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5100000
Size:	65536

Details

Name:	0000000C.00000002.602160800.0000000002B55000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B55000
Size:	4096

Details

Name:	0000000D.00000003.495103820.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.408300251.00000000053E3000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	0000000C.00000003.451154270.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	00000003.00000003.374880793.000000000069F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69F000
Size:	40960

Details

Name:	0000000C.00000003.548770394.0000000000C99000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	00000000.00000003.339395694.000001B865F8D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F8D000
Size:	20480

Details

Name:	00000001.00000002.368533997.0000000000A60000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A60000
Size:	61440

Details

Name:	00000000.00000003.339600376.000001B8665A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665A0000
Size:	57344

Details

Name:	00000008.00000003.393302412.000000001B9EC000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9EC000
Size:	16384

Details

Name:	00000000.00000003.361151297.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	204800

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000001.355971742.00000000001D0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D0000
Size:	4096

Details

Name:	0000000D.00000003.496366045.0000000005AAA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAA000
Size:	4096

Details

Name:	00000001.00000002.369467254.000000001B120000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B120000
Size:	4096

Details

Name:	00000000.00000003.369540715.000001B866E80000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B866E80000
Size:	4096

Details

Name:	00000008.00000002.397194658.00007FFD066C2000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066C2000
Size:	12288

Details

Name:	0000000D.00000000.490749268.00000000008A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A0000
Size:	4096

Details

Name:	0000000D.00000003.499037175.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	0000000C.00000002.602184068.0000000002B57000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B57000
Size:	4096

Details

Name:	00000000.00000003.332976749.000001B8661D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661D7000
Size:	212992

Details

Name:	0000000D.00000002.612653968.00000000052B4000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	52B4000
Size:	8192

Details

Name:	00000000.00000003.370487883.000001B865BB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB4000
Size:	16384

Details

Name:	0000000D.00000003.494027543.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000010.00000002.599409749.000000677AAFE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677AAFE000
Size:	8192

Details

Name:	00000000.00000003.370262941.000001B865F86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F86000
Size:	28672

Details

Name:	0000000C.00000003.451090669.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	00000002.00000002.613471598.0000000005040000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5040000
Size:	4096

Details

Name:	00000003.00000002.599982334.0000000000510000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	510000
Size:	8192

Details

Name:	00000008.00000002.396300833.00000000011EA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11EA000
Size:	24576

Details

Name:	0000000D.00000003.500520007.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000008.00000003.393768633.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	00000010.00000002.609876722.00007FF5CF72D000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF72D000
Size:	4096

Details

Name:	00000008.00000003.393813265.0000000000FF1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF1000
Size:	77824

Details

Name:	00000001.00000002.368593378.0000000000AF0000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	AF0000
Size:	32768

Details

Name:	0000000B.00000002.600436350.0000022951DB0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951DB0000
Size:	4096

Details

Name:	00000001.00000003.357440235.000000000068C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	4096

Details

Name:	00000010.00000002.609397890.000001D3FD42F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD42F000
Size:	40960

Details

Name:	0000000C.00000003.451951041.00000000059E0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59E0000
Size:	12288

Details

Name:	00000000.00000003.331622193.000001B865C74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C74000
Size:	36864

Details

Name:	00000003.00000002.599541715.00000000000D0000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	D0000
Size:	16384

Details

Name:	00000010.00000002.610547795.00007FF5CFE72000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE72000
Size:	49152

Details

Name:	00000000.00000003.331742488.000001B865B81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B81000
Size:	106496

Details

Name:	00000000.00000003.339279864.000001B866207000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866207000
Size:	16384

Details

Name:	00000010.00000002.610740354.00007FF5CFF36000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF36000
Size:	16384

Details

Name:	00000008.00000002.396833270.0000000002F21000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F21000
Size:	466944

Details

Name:	0000000F.00000003.517667198.000000000210C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	210C000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.610151181.00007FF5CFC4A000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC4A000
Size:	12288

Details

Name:	00000010.00000002.601414154.000001D3FBC75000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC75000
Size:	8192

Details

Name:	00000000.00000003.368892058.000001B865B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9C000
Size:	4096

Details

Name:	0000000C.00000003.452195008.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	8192

Details

Name:	0000000C.00000002.612017692.000000000576E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	576E000
Size:	8192

Details

Name:	0000000B.00000003.426608511.0000022951E7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7E000
Size:	4096

Details

Name:	00000000.00000002.375052713.000001B867240000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B867240000
Size:	634880

Details

Name:	00000000.00000003.369696715.000001B865F57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F57000
Size:	32768

Details

Name:	0000000B.00000003.421165528.0000022951E1E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E1E000
Size:	8192

Details

Name:	00000003.00000003.368102569.000000001AFE0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AFE0000
Size:	65536

Details

Name:	00000002.00000003.427494388.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	0000000C.00000003.452467451.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	4096

Details

Name:	00000001.00000002.367624714.000000000060D000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	60D000
Size:	180224

Details

Name:	0000000C.00000002.602228108.0000000002B5D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B5D000
Size:	4096

Details

Name:	0000000D.00000002.613712214.0000000005C30000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	8192

Details

Name:	00000002.00000002.614001599.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000001.00000003.357418897.000000000068D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68D000
Size:	20480

Details

Name:	00000010.00000002.608862487.000001D3FD080000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD080000
Size:	4096

Details

Name:	00000003.00000003.373240803.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	20480

Details

Name:	00000000.00000003.369929225.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	61440

Details

Name:	0000000D.00000003.494609541.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000010.00000002.609832876.00007FF5CF70F000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF70F000
Size:	12288

Details

Name:	0000000C.00000003.548650407.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	45056

Details

Name:	00000001.00000003.357739031.000000001B100000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B100000
Size:	65536

Details

Name:	0000000D.00000003.496045294.0000000005AE2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE2000
Size:	4096

Details

Name:	00000008.00000003.393278350.000000001B9F7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9F7000
Size:	36864

Details

Name:	0000000C.00000002.599769539.0000000000CF0000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	CF0000
Size:	16384

Details

Name:	00000000.00000003.368945880.000001B865C83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C83000
Size:	4096

Details

Name:	0000000D.00000003.496248676.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	16384

Details

Name:	00000000.00000002.375497372.00007FF5C670F000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C670F000
Size:	4096

Details

Name:	00000000.00000003.369571590.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	32768

Details

Name:	0000000D.00000003.494978240.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	0000000D.00000003.501673413.0000000001147000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1147000
Size:	4096

Details

Name:	00000002.00000002.599768955.0000000000640000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	640000
Size:	4096

Details

Name:	00000000.00000003.368899002.000001B865BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB2000
Size:	4096

Details

Name:	0000000F.00000003.517845824.0000000002129000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2129000
Size:	4096

Details

Name:	0000000C.00000003.445068769.00000000050F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F0000
Size:	4096

Details

Name:	0000000D.00000003.496350483.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	8192

Details

Name:	0000000C.00000002.611094714.00000000050E0000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	50E0000
Size:	40960

Details

Name:	0000000E.00000002.514173328.000000000068E000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	68E000
Size:	8192

Details

Name:	00000008.00000003.393578945.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000C.00000002.600645308.0000000001160000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1160000
Size:	65536

Details

Name:	00000010.00000002.602591553.000001D3FC3F3000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC3F3000
Size:	4096

Details

Name:	00000002.00000002.613538784.0000000005110000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5110000
Size:	8192

Details

Name:	00000001.00000002.367930389.0000000000675000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	675000
Size:	98304

Details

Name:	00000000.00000002.371044753.000001B863CE7000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B863CE7000
Size:	8192

Details

Name:	00000000.00000003.342150129.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	90112

Details

Name:	0000000D.00000002.602904401.0000000001750000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1750000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000000.00000003.369951113.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	61440

Details

Name:	00000001.00000002.369662909.00007FFD06692000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06692000
Size:	12288

Details

Name:	0000000F.00000003.517599621.000000000212D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	212D000
Size:	8192

Details

Name:	00000010.00000002.609073967.000001D3FD2B0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2B0000
Size:	4096

Details

Name:	00000010.00000002.601759611.000001D3FBC78000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC78000
Size:	4096

Details

Name:	00000010.00000002.610012044.00007FF5CFBF3000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFBF3000
Size:	16384

Details

Name:	00000000.00000003.369091642.000001B865B7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B7F000
Size:	24576

Details

Name:	00000003.00000002.610978419.000000001B2BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B2BE000
Size:	8192

Details

Name:	0000000C.00000003.452140021.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	16384

Details

Name:	0000000C.00000003.451212196.0000000005814000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5814000
Size:	4096

Details

Name:	00000010.00000002.602460536.000001D3FC390000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC390000
Size:	4096

Details

Name:	0000000B.00000003.426447554.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	98304

Details

Name:	00000008.00000002.395980795.0000000000ED0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ED0000
Size:	4096

Details

Name:	0000000B.00000003.426586521.0000022951E67000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E67000
Size:	90112

Details

Name:	00000010.00000003.524334644.000001D3FC518000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC518000
Size:	4096

Details

Name:	0000000E.00000003.513882561.0000000000B9C000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B9C000
Size:	8192

Details

Name:	0000000C.00000002.602414148.0000000002B7F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B7F000
Size:	4714496

Details

Name:	00000003.00000002.600919453.0000000000B90000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	B90000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000002.00000003.439944413.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000008.00000002.396340005.0000000001210000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1210000
Size:	65536

Details

Name:	00000000.00000003.332268261.000001B8669AC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8669AC000
Size:	4096

Details

Name:	00000008.00000003.393596274.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	4096

Details

Name:	0000000D.00000003.496054445.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	16384

Details

Name:	0000000F.00000003.516282645.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000008.00000002.396009098.0000000000F30000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F30000
Size:	4096

Details

Name:	00000010.00000002.603037848.000001D3FCC40000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC40000
Size:	65536

Details

Name:	00000000.00000002.373459438.000001B865C70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C70000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.601069625.0000000000AA6000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	AA6000
Size:	28672

Details

Name:	00000000.00000003.334233289.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	0000000B.00000002.600742463.0000022951F05000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22951F05000
Size:	12288

Details

Name:	00000002.00000002.599908890.000000000067A000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	67A000
Size:	12288

Details

Name:	0000000D.00000002.601383275.0000000000FF0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000C.00000003.452788391.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	12288

Details

Name:	0000000D.00000003.493898656.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000003.500850112.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	0000000D.00000003.496021855.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	00000000.00000003.340011523.000001B86618E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618E000
Size:	16384

Details

Name:	0000000C.00000003.452604503.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	00000002.00000002.599791012.0000000000650000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	650000
Size:	8192

Details

Name:	00000008.00000003.393205903.000000001BA10000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BA10000
Size:	28672

Details

Name:	00000000.00000002.371769482.000001B863E20000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B863E20000
Size:	806912

Details

Name:	00000010.00000002.608773744.000001D3FCFE0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FCFE0000
Size:	4096

Details

Name:	00000010.00000002.610379258.00007FF5CFE08000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE08000
Size:	4096

Details

Name:	00000000.00000003.341251910.000001B865F71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F71000
Size:	8192

Details

Name:	00000002.00000003.440247300.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000003.00000003.369127950.00000000006AC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AC000
Size:	8192

Details

Name:	00000000.00000002.370825578.000001B863CD0000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B863CD0000
Size:	12288

Details

Name:	00000002.00000003.439953774.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	0000000B.00000002.599202733.0000006F816CB000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F816CB000
Size:	20480

Details

Name:	0000000D.00000002.613309279.00000000058B0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	58B0000
Size:	4096

Details

Name:	0000000D.00000003.497723564.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.497650930.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	12288

Details

Name:	00000010.00000002.602354152.000001D3FC1A0000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FC1A0000
Size:	16384

Details

Name:	0000000C.00000003.452088283.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	36864

Details

Name:	00000001.00000003.358154745.000000001B0A0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0A0000
Size:	12288

Details

Name:	00000003.00000003.374555540.000000000069F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69F000
Size:	20480

Details

Name:	00000002.00000002.613223268.0000000004CBE000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4CBE000
Size:	8192

Details

Name:	0000000D.00000003.504198608.0000000007D80000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D80000
Size:	65536

Details

Name:	0000000D.00000002.602491434.00000000012B8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12B8000
Size:	8192

Details

Name:	00000000.00000003.333622631.000001B865F4E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F4E000
Size:	65536

Details

Name:	00000010.00000002.610595571.00007FF5CFE97000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE97000
Size:	4096

Details

Name:	0000000D.00000003.496110456.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.492738282.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	00000000.00000003.331387590.000001B865D1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D1E000
Size:	4096

Details

Name:	00000000.00000003.341335477.000001B865F9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9B000
Size:	12288

Details

Name:	0000000F.00000003.517730957.0000000002129000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2129000
Size:	4096

Details

Name:	00000008.00000003.392874858.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	00000003.00000001.364636235.00000000000A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	A0000
Size:	4096

Details

Name:	0000000D.00000003.501751174.0000000001131000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1131000
Size:	98304

Details

Name:	0000000F.00000003.516297929.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000C.00000003.582727900.0000000000C99000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	00000000.00000003.341260235.000001B865F74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F74000
Size:	69632

Details

Name:	0000000D.00000003.497938022.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	0000000B.00000002.608505778.00007FF57E641000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E641000
Size:	8192

Details

Name:	00000001.00000003.358367029.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Details

Name:	0000000D.00000002.615106757.00000000073F0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	73F0000
Size:	4096

Details

Name:	0000000C.00000002.612586872.0000000005C2E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C2E000
Size:	8192

Details

Name:	00000000.00000003.342748421.000001B8665E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E3000
Size:	49152

Details

Name:	0000000D.00000003.496003634.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000000.00000003.343119020.000001B865D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D7D000
Size:	253952

Details

Name:	0000000D.00000003.499337257.0000000005AB7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB7000
Size:	28672

Details

Name:	0000000D.00000003.500582530.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	0000000B.00000002.608309238.00007FF57E58F000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E58F000
Size:	4096

Details

Name:	00000001.00000002.369668751.00007FFD06696000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06696000
Size:	8192

Details

Name:	0000000D.00000003.500060900.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	0000000D.00000003.492745060.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000003.548694646.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	188416

Details

Name:	00000000.00000003.339535260.000001B865F73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F73000
Size:	45056

Details

Name:	0000000D.00000002.601775152.0000000001030000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1030000
Size:	4096

Details

Name:	0000000D.00000002.604120486.0000000002C70000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2C70000
Size:	4096

Details

Name:	00000000.00000002.376361516.00007FF5C6A23000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6A23000
Size:	8192

Details

Name:	00000008.00000002.395785384.0000000000020000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20000
Size:	8192

Details

Name:	00000008.00000002.396981320.000000001B810000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B810000
Size:	20480

Details

Name:	00000000.00000003.339543663.000001B863DC1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DC1000
Size:	69632

Details

Name:	00000003.00000003.374584618.0000000000694000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	4096

Details

Name:	00000000.00000003.340093779.000001B866187000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866187000
Size:	28672

Details

Name:	00000003.00000002.610843174.000000001B0EA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0EA000
Size:	24576

Details

Name:	00000000.00000003.340025090.000001B8661F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661F2000
Size:	16384

Details

Name:	00000008.00000003.393248784.000000001B9C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C0000
Size:	65536

Details

Name:	00000002.00000003.413958275.00000000054F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54F0000
Size:	2621440

Details

Name:	0000000C.00000002.612800571.0000000005F2D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5F2D000
Size:	12288

Details

Name:	0000000D.00000003.498725783.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000000.00000002.373404603.000001B865B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9C000
Size:	4096

Details

Name:	0000000D.00000003.498998712.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Details

Name:	0000000B.00000000.420783557.00007FF57E697000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E697000
Size:	16384

Details

Name:	0000000D.00000002.609441401.0000000003130000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3130000
Size:	12288

Details

Name:	00000003.00000002.611149978.00007FFD066F4000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066F4000
Size:	8192

Details

Name:	00000010.00000002.610139042.00007FF5CFC46000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC46000
Size:	4096

Details

Name:	00000002.00000002.600884564.0000000000A5E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A5E000
Size:	8192

Details

Name:	0000000C.00000002.602261812.0000000002B69000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B69000
Size:	4096

Details

Name:	00000000.00000003.333542090.000001B86602C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602C000
Size:	4096

Details

Name:	0000000F.00000003.517301143.0000000002127000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2127000
Size:	65536

Details

Name:	00000008.00000003.393917900.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	00000000.00000003.332909430.000001B86620B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86620B000
Size:	425984

Details

Name:	00000010.00000002.610266349.00007FF5CFCEF000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFCEF000
Size:	12288

Details

Name:	00000000.00000002.374030455.000001B8665FE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665FE000
Size:	4096

Details

Name:	00000000.00000002.371624626.000001B863DF7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DF7000
Size:	32768

Details

Name:	0000000F.00000003.516267741.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000F.00000003.517790333.000000000094C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94C000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.392896880.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	143360

Details

Name:	0000000D.00000003.496712213.0000000005AC1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	4096

Details

Name:	0000000D.00000003.499523968.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	0000000D.00000003.496131473.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	0000000B.00000003.421177330.0000022951E1E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E1E000
Size:	8192

Details

Name:	00000002.00000002.599495108.0000000000500000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	500000
Size:	806912

Details

Name:	0000000F.00000003.516959080.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000003.00000003.373170260.00000000006A5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A5000
Size:	61440

Details

Name:	00000000.00000003.339775838.000001B866587000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866587000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000003.357953569.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	0000000D.00000003.496856424.0000000005AC1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	8192

Details

Name:	0000000D.00000003.499831038.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	36864

Details

Name:	00000003.00000003.369321709.0000000000678000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	678000
Size:	4096

Details

Name:	0000000D.00000003.494056432.0000000005AB9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB9000
Size:	4096

Details

Name:	00000003.00000002.601985546.00000000021C0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21C0000
Size:	4096

Details

Name:	00000000.00000003.331461520.000001B865B7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B7A000
Size:	217088

Details

Name:	00000003.00000002.610067797.000000001AEE0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEE0000
Size:	4096

Details

Name:	0000000D.00000003.500344317.0000000005AAA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAA000
Size:	4096

Details

Name:	00000001.00000003.358034996.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	00000010.00000002.610667648.00007FF5CFEFD000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFEFD000
Size:	12288

Details

Name:	0000000D.00000003.500876755.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	0000000C.00000003.484892192.0000000000C9E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	4096

Details

Name:	0000000D.00000003.498863575.0000000005AB4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB4000
Size:	8192

Details

Name:	0000000C.00000003.580570950.0000000000C54000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	16384

Details

Name:	0000000D.00000003.493600038.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000003.00000002.610739125.000000001B097000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B097000
Size:	36864

Details

Name:	0000000D.00000003.493352094.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000C.00000003.451872597.00000000059D0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	65536

Details

Name:	00000010.00000002.601860226.000001D3FBC8F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC8F000
Size:	8192

Details

Name:	0000000D.00000003.492968504.0000000005AB0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	8192

Details

Name:	0000000D.00000002.609454116.0000000003134000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3134000
Size:	28672

Details

Name:	00000008.00000003.392623386.0000000000FEA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FEA000
Size:	4096

Details

Name:	00000008.00000003.393788290.0000000001030000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1030000
Size:	12288

Details

Name:	00000000.00000003.341174262.000001B86602B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602B000
Size:	344064

Details

Name:	00000000.00000002.371444798.000001B863DB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DB4000
Size:	57344

Details

Name:	0000000C.00000002.608961472.0000000003AF7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3AF7000
Size:	4096

Details

Name:	0000000D.00000003.496880249.0000000005AC2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC2000
Size:	4096

Details

Name:	00000000.00000003.370297022.000001B8665F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665F2000
Size:	16384

Details

Name:	00000003.00000003.369135211.00000000006B1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B1000
Size:	4096

Details

Name:	00000000.00000003.340266729.000001B8661D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661D5000
Size:	12288

Details

Name:	0000000D.00000003.492655573.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	00000003.00000003.373265545.0000000000696000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	12288

Details

Name:	0000000D.00000003.499186418.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000000.00000003.342764150.000001B8661D9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661D9000
Size:	12288

Details

Name:	00000008.00000003.393845570.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	106496

Details

Name:	0000000C.00000002.599506759.0000000000BAA000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BAA000
Size:	135168

Details

Name:	0000000F.00000002.518671570.00000000007DE000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7DE000
Size:	8192

Details

Name:	00000000.00000003.370425379.000001B865B8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B8A000
Size:	4096

Details

Name:	0000000D.00000003.498469996.0000000005ADA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	16384

Details

Name:	00000003.00000000.364591358.00000000000B4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B4000
Size:	4096

Details

Name:	0000000B.00000002.607841587.0000022952BC0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22952BC0000
Size:	4096

Details

Name:	00000001.00000002.369609725.000000001B6CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B6CE000
Size:	8192

Details

Name:	00000010.00000002.608833560.000001D3FD060000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD060000
Size:	4096

Details

Name:	0000000F.00000003.518065717.000000000094E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.613771469.0000000005CAD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CAD000
Size:	12288

Details

Name:	0000000D.00000003.492866919.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000003.493032602.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000003.00000003.368887767.000000001AF20000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF20000
Size:	65536

Details

Name:	00000000.00000003.368479286.000001B865C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C71000
Size:	131072

Details

Name:	00000008.00000002.397181930.00007FFD066B2000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066B2000
Size:	8192

Details

Name:	0000000D.00000003.496375592.0000000005AAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAC000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.392851137.0000000000FF0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000B.00000002.608635091.00007FF57E683000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E683000
Size:	8192

Details

Name:	0000000C.00000003.451232031.00000000050C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C9000
Size:	24576

Details

Name:	00000008.00000002.396015816.0000000000F50000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F50000
Size:	8192

Details

Name:	00000003.00000002.599993321.0000000000530000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	530000
Size:	12288

Details

Name:	00000001.00000003.358099638.00000000006AD000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	8192

Details

Name:	0000000B.00000003.558102421.0000022951EB1000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB1000
Size:	20480

Details

Name:	00000008.00000003.393876600.0000000001027000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1027000
Size:	4096

Details

Name:	00000000.00000003.339912745.000001B8661E2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661E2000
Size:	167936

Details

Name:	0000000D.00000003.496332267.0000000005AE1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE1000
Size:	4096

Details

Name:	00000000.00000003.342635419.000001B866586000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866586000
Size:	98304

Details

Name:	0000000F.00000002.518633807.00000000006A0000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6A0000
Size:	24576

Details

Name:	0000000D.00000003.491390053.0000000002CA0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CA0000
Size:	16384

Details

Name:	0000000F.00000003.518026886.0000000002129000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2129000
Size:	4096

Details

Name:	00000003.00000002.611169445.00007FFD06752000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06752000
Size:	4096

Details

Name:	00000002.00000002.600049435.00000000006A7000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	6A7000
Size:	4096

Details

Name:	00000008.00000002.396899412.0000000012F25000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F25000
Size:	4096

Details

Name:	0000000B.00000002.608579493.00007FF57E654000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E654000
Size:	8192

Details

Name:	00000000.00000003.368642901.000001B865C85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C85000
Size:	49152

Details

Name:	00000003.00000002.610124261.000000001AF20000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1AF20000
Size:	1269760

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000D.00000002.616621841.000000000877E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	877E000
Size:	8192

Details

Name:	00000000.00000003.339752535.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	00000003.00000002.609863798.000000001AE7C000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1AE7C000
Size:	114688

Details

Name:	0000000C.00000003.451111734.0000000000C8F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8F000
Size:	65536

Details

Name:	0000000D.00000002.604495954.0000000002CD7000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2CD7000
Size:	12288

Details

Name:	0000000E.00000002.514122034.000000000052E000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E000
Size:	8192

Details

Name:	00000003.00000002.609383563.0000000002848000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2848000
Size:	192512

Details

Name:	0000000D.00000002.616114635.0000000007D90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7D90000
Size:	36864

Details

Name:	00000008.00000003.393904080.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	0000000C.00000002.599331317.00000000007F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F0000
Size:	8192

Details

Name:	00000000.00000003.341651580.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000001.00000002.368704179.00000000023F2000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23F2000
Size:	4096

Details

Name:	0000000C.00000003.451495245.00000000057A5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A5000
Size:	454656

Details

Name:	00000008.00000003.392973430.0000000001038000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1038000
Size:	12288

Details

Name:	00000003.00000003.374833867.00000000006AF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AF000
Size:	8192

Details

Name:	00000003.00000002.609818785.000000001AE70000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1AE70000
Size:	20480

Details

Name:	00000000.00000003.369588701.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	98304

Details

Name:	0000000D.00000003.500170132.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000002.00000003.509445630.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	00000000.00000002.373918233.000001B86659F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86659F000
Size:	61440

Details

Name:	00000000.00000003.341439461.000001B863DC1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DC1000
Size:	69632

Details

Name:	0000000D.00000003.498417878.0000000005ADA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	16384

Details

Name:	0000000D.00000003.493171513.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000B.00000002.600730980.0000022951F00000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22951F00000
Size:	12288

Details

Name:	00000000.00000003.362947665.000001B865F9A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9A000
Size:	16384

Details

Name:	0000000C.00000003.580718095.00000000050B3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B3000
Size:	36864

Details

Name:	0000000D.00000003.504881207.0000000008100000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8100000
Size:	8192

Details

Name:	00000000.00000002.374008217.000001B8665EE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665EE000
Size:	4096

Details

Name:	0000000D.00000002.615752803.000000000799D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	799D000
Size:	12288

Details

Name:	0000000D.00000003.493996843.0000000005AB8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB8000
Size:	4096

Details

Name:	0000000C.00000002.599484777.0000000000BA0000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BA0000
Size:	36864

Details

Name:	0000000D.00000002.609484389.000000000313E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	313E000
Size:	4096

Details

Name:	00000008.00000003.392578759.0000000000FFF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FFF000
Size:	20480

Details

Name:	00000000.00000003.341345058.000001B866028000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866028000
Size:	8192

Details

Name:	0000000D.00000003.494939220.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	0000000B.00000002.599332128.0000006F81BF9000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F81BF9000
Size:	28672

Details

Name:	0000000C.00000002.599388064.00000000009C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9C4000
Size:	4096

Details

Name:	00000003.00000003.373234908.000000000069B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69B000
Size:	8192

Details

Name:	0000000F.00000003.517681264.000000000211B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211B000
Size:	4096

Details

Name:	00000003.00000003.368069776.00000000005F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5F0000
Size:	65536

Details

Name:	0000000D.00000003.497679677.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	12288

Details

Name:	0000000D.00000002.600129650.0000000000B94000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B94000
Size:	4096

Details

Name:	00000000.00000002.373412837.000001B865BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB2000
Size:	4096

Details

Name:	0000000E.00000002.514276909.00000000021D0000.00000004.00000040.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	21D0000
Size:	8192

Details

Name:	0000000D.00000003.493888397.0000000005ABC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABC000
Size:	4096

Details

Name:	00000000.00000003.333575562.000001B865F71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F71000
Size:	200704

Details

Name:	00000001.00000002.369436601.000000001B090000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B090000
Size:	69632

Details

Name:	00000010.00000002.599671571.000000677B17E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B17E000
Size:	8192

Details

Name:	00000001.00000002.369754119.00007FFD067D0000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD067D0000
Size:	28672

Details

Name:	00000000.00000003.342625352.000001B865F98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F98000
Size:	24576

Details

Name:	00000000.00000002.375299436.00007FF5C6245000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6245000
Size:	4096

Details

Name:	00000000.00000003.342571388.000001B866019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866019000
Size:	24576

Details

Name:	0000000D.00000003.495160301.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000010.00000002.609912012.00007FF5CFA72000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFA72000
Size:	8192

Details

Name:	0000000D.00000003.494374141.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	0000000D.00000003.497530327.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	00000000.00000003.368881638.000001B865B94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B94000
Size:	16384

Details

Name:	00000000.00000003.331712538.000001B865B9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9B000
Size:	16384

Details

Name:	00000010.00000003.516395459.000001D3FD1C0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1C0000
Size:	4096

Details

Name:	00000010.00000002.608920402.000001D3FD1B0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1B0000
Size:	4096

Details

Name:	0000000F.00000003.516199705.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000000.00000003.369402071.000001B867330000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867330000
Size:	4096

Details

Name:	0000000F.00000003.516809077.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	00000001.00000003.357841927.0000000000A80000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A80000
Size:	65536

Details

Name:	00000008.00000003.393705082.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	0000000D.00000003.495266979.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000000.00000003.370135244.000001B8661CF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661CF000
Size:	102400

Details

Name:	0000000D.00000003.499402570.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	110592

Details

Name:	00000008.00000002.396404488.000000000133E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	133E000
Size:	8192

Details

Name:	0000000D.00000002.599319686.00000000008A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A0000
Size:	4096

Details

Name:	00000000.00000003.339954425.000001B8661F6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661F6000
Size:	86016

Details

Name:	00000000.00000000.330824279.00007FF5AD6B5000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5AD6B5000
Size:	4096

Details

Name:	00000003.00000002.611029268.00007FFD06692000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06692000
Size:	8192

Details

Name:	00000000.00000002.373600398.000001B865F83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F83000
Size:	12288

Details

Name:	0000000D.00000003.495929473.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	00000001.00000003.357943026.000000000068B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68B000
Size:	8192

Details

Name:	00000000.00000003.339839120.000001B8665BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665BF000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.600828974.000001D3FBC29000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC29000
Size:	94208

Details

Name:	00000002.00000002.613413547.0000000005000000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5000000
Size:	12288

Details

Name:	0000000D.00000003.495196579.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	61440

Details

Name:	00000000.00000002.375509065.00007FF5C6722000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6722000
Size:	20480

Details

Name:	00000000.00000003.370239178.000001B863D52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D52000
Size:	49152

Details

Name:	0000000F.00000003.517449923.000000000211B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211B000
Size:	4096

Details

Name:	0000000D.00000003.492336371.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000003.337517080.000001B866DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866DB0000
Size:	4096

Details

Name:	0000000C.00000003.550846885.0000000000C54000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	16384

Details

Name:	00000000.00000003.342778002.000001B866BB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866BB3000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
Yara signature match	System Summary

Details

Name:	0000000D.00000002.613785631.0000000005CB0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5CB0000
Size:	8192

Details

Name:	00000000.00000002.375686647.00007FF5C67CA000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C67CA000
Size:	16384

Details

Name:	00000000.00000003.332870383.000001B866273000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866273000
Size:	446464

Details

Name:	0000000F.00000003.517379185.0000000002124000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2124000
Size:	12288

Details

Name:	0000000D.00000002.601059368.0000000000E40000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	E40000
Size:	16384

Details

Name:	00000001.00000003.357957674.0000000000673000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	16384

Details

Name:	0000000D.00000003.494647188.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	0000000F.00000003.516573751.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000003.00000002.611058208.00007FFD066A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD066A0000
Size:	8192

Details

Name:	00000000.00000002.372078969.000001B865690000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B865690000
Size:	733184

Details

Name:	00000000.00000003.340726702.000001B865F85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F85000
Size:	102400

Details

Name:	00000010.00000002.610446503.00007FF5CFE29000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE29000
Size:	16384

Details

Name:	00000000.00000003.331496764.000001B865B9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9F000
Size:	147456

Details

Name:	00000000.00000003.339353062.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	225280

Details

Name:	0000000D.00000003.497371407.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	0000000F.00000002.518235954.000000000036D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	36D000
Size:	4096

Details

Name:	00000010.00000002.599611230.000000677AFFA000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677AFFA000
Size:	24576

Details

Name:	0000000E.00000002.514161604.000000000064E000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	64E000
Size:	8192

Details

Name:	00000003.00000002.611140655.00007FFD066C3000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066C3000
Size:	4096

Details

Name:	00000000.00000003.340153060.000001B8661EF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661EF000
Size:	12288

Details

Name:	0000000D.00000003.504671414.00000000077CC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77CC000
Size:	28672

Details

Name:	00000003.00000002.600102084.0000000000555000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	555000
Size:	8192

Details

Name:	00000002.00000000.360852033.0000000000080000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	80000
Size:	4096

Details

Name:	00000008.00000003.394295057.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	00000000.00000003.369655363.000001B865F57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F57000
Size:	32768

Details

Name:	00000002.00000002.600102223.00000000006C0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	6C0000
Size:	12288

Details

Name:	00000002.00000003.448132822.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000F.00000003.518055106.0000000002131000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	4096

Details

Name:	00000000.00000003.369750691.000001B86619E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86619E000
Size:	36864

Details

Name:	00000002.00000003.427518453.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	00000000.00000003.369795024.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	139264

Details

Name:	00000000.00000002.373652438.000001B865FA3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA3000
Size:	8192

Details

Name:	00000001.00000003.357594780.0000000000696000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	86016

Details

Name:	00000010.00000002.602646486.000001D3FC400000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC400000
Size:	4096

Details

Name:	00000008.00000002.397014549.000000001B82C000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B82C000
Size:	114688

Details

Name:	00000008.00000003.393636564.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	0000000D.00000003.493724397.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000000.00000003.334288284.000001B865B73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B73000
Size:	61440

Details

Name:	00000003.00000002.609579139.0000000012595000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12595000
Size:	4096

Details

Name:	00000010.00000002.610616397.00007FF5CFE9E000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE9E000
Size:	4096

Details

Name:	00000002.00000003.405188597.00000000050E0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	65536

Details

Name:	00000003.00000003.373200811.0000000000698000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	698000
Size:	4096

Details

Name:	00000008.00000003.393291171.000000001B9E0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9E0000
Size:	40960

Details

Name:	00000000.00000003.341798745.000001B865FAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAF000
Size:	253952

Details

Name:	0000000F.00000002.518698801.00000000008E0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8E0000
Size:	4096

Details

Name:	00000002.00000002.613236386.0000000004DBE000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DBE000
Size:	8192

Details

Name:	0000000F.00000003.515797289.0000000002119000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2119000
Size:	110592

Details

Name:	0000000D.00000002.613299770.00000000058A0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	58A0000
Size:	12288

Details

Name:	00000010.00000003.516809965.000001D3FD2E0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2E0000
Size:	4096

Details

Name:	0000000D.00000003.501081618.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.601038471.0000000000E3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E3E000
Size:	8192

Details

Name:	00000010.00000002.602780994.000001D3FC513000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC513000
Size:	20480

Details

Name:	00000000.00000003.339656954.000001B863D52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D52000
Size:	454656

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.511609611.0000000008170000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8170000
Size:	28672

Details

Name:	0000000D.00000002.613547705.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000003.00000003.373572572.000000001B130000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B130000
Size:	65536

Details

Name:	00000003.00000002.610859758.000000001B190000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B190000
Size:	4096

Details

Name:	0000000D.00000003.499683691.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	0000000C.00000002.611076072.00000000050D7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50D7000
Size:	16384

Details

Name:	00000000.00000003.331769707.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000010.00000002.610485769.00007FF5CFE4F000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE4F000
Size:	8192

Details

Name:	00000000.00000003.368456784.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000003.00000003.368507287.000000001AF80000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF80000
Size:	65536

Details

Name:	00000010.00000002.610468054.00007FF5CFE3F000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE3F000
Size:	4096

Details

Name:	00000000.00000002.376134697.00007FF5C6994000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6994000
Size:	57344

Details

Name:	0000000B.00000002.600763041.0000022951F0A000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22951F0A000
Size:	4096

Details

Name:	00000000.00000003.332549199.000001B86672A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86672A000
Size:	4096

Details

Name:	00000008.00000002.395876937.0000000000BF0000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	BF0000
Size:	4096

Details

Name:	0000000C.00000002.611280267.000000000529D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	529D000
Size:	12288

Details

Name:	00000002.00000002.608687643.00000000028FB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28FB000
Size:	5005312

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000D.00000002.600270270.0000000000BA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BA3000
Size:	4096

Details

Name:	0000000D.00000002.601848080.0000000001052000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1052000
Size:	4096

Details

Name:	00000000.00000003.333011356.000001B866171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866171000
Size:	417792

Details

Name:	00000000.00000003.336106576.000001B865B79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B79000
Size:	24576

Details

Name:	0000000C.00000003.452688807.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	0000000C.00000003.451220022.00000000050B7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B7000
Size:	45056

Details

Name:	0000000D.00000002.613394432.0000000005970000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5970000
Size:	65536

Details

Name:	00000000.00000003.369495701.000001B866F30000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B866F30000
Size:	45056

Details

Name:	0000000B.00000002.608134335.00007FF57DE85000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DE85000
Size:	4096

Details

Name:	00000010.00000003.524415773.000001D3FD4B8000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD4B8000
Size:	4096

Details

Name:	0000000D.00000002.604334510.0000000002CB0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB0000
Size:	65536

Details

Name:	00000010.00000002.602719773.000001D3FC500000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC500000
Size:	4096

Details

Name:	00000000.00000003.341102375.000001B865FAD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAD000
Size:	8192

Details

Name:	00000000.00000003.331538386.000001B865C7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7D000
Size:	73728

Details

Name:	00000000.00000003.333122872.000001B866079000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866079000
Size:	364544

Details

Name:	00000001.00000002.368629249.000000000239C000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	239C000
Size:	114688

Details

Name:	00000003.00000003.369349772.000000000067B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	69632

Details

Name:	00000000.00000003.332844553.000001B86644E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86644E000
Size:	4096

Details

Name:	00000002.00000003.448125099.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	4096

Details

Name:	00000003.00000003.373855285.000000001B0F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F0000
Size:	65536

Details

Name:	0000000B.00000002.608192006.00007FF57E41C000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E41C000
Size:	8192

Details

Name:	00000002.00000002.613945234.0000000006170000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6170000
Size:	4096

Details

Name:	0000000C.00000002.600549632.0000000000F40000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F40000
Size:	65536

Details

Name:	00000000.00000003.361882371.000001B866207000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866207000
Size:	16384

Details

Name:	0000000F.00000003.516720494.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000F.00000002.518834159.0000000002129000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2129000
Size:	4096

Details

Name:	0000000B.00000002.608546590.00007FF57E647000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E647000
Size:	20480

Details

Name:	0000000D.00000003.492277533.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000003.354117040.000001B865DBA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865DBA000
Size:	507904

Details

Name:	00000003.00000003.373363540.000000000069B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69B000
Size:	8192

Details

Name:	0000000B.00000003.426516696.0000022951E3C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E3C000
Size:	266240

Details

Name:	0000000D.00000003.500293949.0000000005AAA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAA000
Size:	4096

Details

Name:	00000000.00000003.370118644.000001B8665F6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665F6000
Size:	36864

Details

Name:	00000000.00000003.362587944.000001B863DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DEF000
Size:	16384

Details

Name:	0000000F.00000003.517355137.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	0000000D.00000002.600188756.0000000000B9A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B9A000
Size:	4096

Details

Name:	0000000E.00000002.514258152.0000000000B90000.00000004.00000040.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B90000
Size:	12288

Details

Name:	00000003.00000003.373257369.00000000006DC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6DC000
Size:	24576

Details

Name:	0000000C.00000003.430232921.0000000001170000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1170000
Size:	24576

Details

Name:	00000003.00000003.369317670.0000000000676000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	676000
Size:	4096

Details

Name:	0000000D.00000003.500352633.0000000005AAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAC000
Size:	73728

Details

Name:	0000000F.00000003.515353870.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000000.00000002.373722201.000001B8660BC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8660BC000
Size:	4096

Details

Name:	0000000D.00000003.494185557.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000000.00000003.340635404.000001B865F9E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9E000
Size:	36864

Details

Name:	0000000D.00000003.499945315.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	24576

Details

Name:	0000000D.00000003.501510381.000000000111B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	111B000
Size:	16384

Details

Name:	00000000.00000003.331617424.000001B865C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C71000
Size:	8192

Details

Name:	00000000.00000003.331510189.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000000.00000002.370647292.0000001D39EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D39EFE000
Size:	8192

Details

Name:	0000000C.00000003.451855978.00000000059E0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59E0000
Size:	65536

Details

Name:	0000000D.00000003.506989349.0000000001168000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1168000
Size:	4096

Details

Name:	0000000D.00000003.502999882.00000000077A8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77A8000
Size:	40960

Details

Name:	0000000F.00000003.516869227.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000008.00000003.394156788.000000001B94D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B94D000
Size:	12288

Details

Name:	00000001.00000003.358268670.000000000068B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68B000
Size:	8192

Details

Name:	00000001.00000003.358491315.0000000000696000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	20480

Details

Name:	00000008.00000003.392856531.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	0000000D.00000003.497421413.0000000005AB4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB4000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.494654810.0000000005ACD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACD000
Size:	4096

Details

Name:	0000000D.00000003.494990214.0000000005ACC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACC000
Size:	12288

Details

Name:	00000010.00000002.610517798.00007FF5CFE66000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE66000
Size:	12288

Details

Name:	00000000.00000002.373614885.000001B865F92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F92000
Size:	24576

Details

Name:	0000000D.00000002.600991704.0000000000DF0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DF0000
Size:	8192

Details

Name:	00000001.00000003.357883523.0000000000A30000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	65536

Details

Name:	0000000B.00000003.426653228.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	98304

Details

Name:	00000000.00000003.368780987.000001B865B73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B73000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.374316099.000001B866DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866DB0000
Size:	8192

Details

Name:	0000000B.00000002.608659901.00007FF57E697000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E697000
Size:	16384

Details

Name:	0000000C.00000003.451373480.0000000005781000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5781000
Size:	602112

Details

Name:	0000000F.00000003.516788536.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000003.501151916.0000000005AEC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEC000
Size:	8192

Details

Name:	00000000.00000003.331703603.000001B865BBC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BBC000
Size:	28672

Details

Name:	0000000F.00000003.516070252.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000003.497612072.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	0000000D.00000003.492632781.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	0000000C.00000003.437483561.0000000000BFF000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BFF000
Size:	512000

Details

Name:	00000001.00000003.358106943.00000000006B5000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B5000
Size:	4096

Details

Name:	00000002.00000002.613051714.0000000004980000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4980000
Size:	16384

Details

Name:	00000002.00000002.600901686.0000000000A60000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	A60000
Size:	4096

Details

Name:	00000000.00000003.332272255.000001B8667C4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8667C4000
Size:	643072

Details

Name:	00000002.00000003.509137983.0000000005980000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5980000
Size:	2621440

Details

Name:	0000000D.00000003.494255677.0000000005ACC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACC000
Size:	8192

Details

Name:	00000003.00000003.373944039.000000000069B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69B000
Size:	8192

Details

Name:	00000010.00000002.602854844.000001D3FCA60000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FCA60000
Size:	4096

Details

Name:	0000000B.00000003.558067451.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	53248

Details

Name:	00000000.00000003.336095706.000001B865B7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B7F000
Size:	12288

Details

Name:	0000000E.00000002.514248628.00000000009EF000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9EF000
Size:	4096

Details

Name:	00000002.00000003.502911814.0000000006183000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6183000
Size:	12288

Details

Name:	0000000C.00000002.602144388.0000000002B4D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B4D000
Size:	4096

Details

Name:	00000001.00000002.369345196.000000001B02E000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B02E000
Size:	8192

Details

Name:	0000000D.00000003.500638753.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	0000000C.00000002.600361479.0000000000EE3000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	EE3000
Size:	4096

Details

Name:	0000000D.00000003.501272957.0000000005C70000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	65536

Details

Name:	00000008.00000003.393539995.000000001B8F0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8F0000
Size:	65536

Details

Name:	0000000E.00000002.514240903.00000000008EE000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8EE000
Size:	8192

Details

Name:	00000001.00000003.357761934.000000001B130000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B130000
Size:	40960

Details

Name:	0000000D.00000003.500410468.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	4096

Details

Name:	00000000.00000002.370751744.000001B863C80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863C80000
Size:	12288

Details

Name:	0000000D.00000003.492951372.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000002.599691509.0000000000C99000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	0000000C.00000002.601978464.0000000002B3A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B3A000
Size:	8192

Details

Name:	00000000.00000002.373765352.000001B866187000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866187000
Size:	8192

Details

Name:	0000000D.00000003.497324010.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	0000000D.00000003.500239590.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	4096

Details

Name:	0000000D.00000002.613758555.0000000005C60000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C60000
Size:	4096

Details

Name:	00000000.00000003.340467320.000001B866586000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866586000
Size:	98304

Details

Name:	0000000B.00000003.426675905.0000022952C10000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22952C10000
Size:	20480

Details

Name:	0000000D.00000003.498756500.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000002.00000002.613935876.000000000597E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	597E000
Size:	8192

Details

Name:	0000000F.00000002.519552480.00000000025F0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	25F0000
Size:	4096

Details

Name:	0000000D.00000003.494836307.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	12288

Details

Name:	0000000D.00000003.494064529.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000003.00000003.369265595.000000001AF30000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF30000
Size:	57344

Details

Name:	00000002.00000002.599884153.0000000000672000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	672000
Size:	20480

Details

Name:	0000000F.00000003.516225923.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000C.00000002.611050237.00000000050D0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50D0000
Size:	20480

Details

Name:	00000003.00000002.600010406.0000000000535000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	535000
Size:	8192

Details

Name:	0000000F.00000002.518871891.00000000021F0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21F0000
Size:	4096

Details

Name:	00000003.00000003.369181309.000000001AF80000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF80000
Size:	12288

Details

Name:	00000010.00000002.609925010.00007FF5CFAA2000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFAA2000
Size:	4096

Details

Name:	00000001.00000002.369639469.00007FF444E40000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FF444E40000
Size:	4096

Details

Name:	00000008.00000002.397188365.00007FFD066C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD066C0000
Size:	8192

Details

Name:	00000002.00000003.497154459.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	0000000D.00000003.499486072.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.498702766.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	0000000D.00000003.504732210.00000000077D9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77D9000
Size:	40960

Details

Name:	0000000B.00000003.543145265.0000022951E2F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E2F000
Size:	4096

Details

Name:	00000003.00000002.599340832.00000000000A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A0000
Size:	4096

Details

Name:	0000000F.00000003.515946651.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	163840

Details

Name:	00000001.00000000.355908005.00000000001D0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D0000
Size:	4096

Details

Name:	0000000C.00000003.580617275.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	188416

Details

Name:	0000000D.00000002.603358571.0000000002C60000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2C60000
Size:	12288

Details

Name:	0000000D.00000003.501223831.0000000005CA0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CA0000
Size:	65536

Details

Name:	00000000.00000003.339620654.000001B8665BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665BF000
Size:	196608

Details

Name:	00000001.00000003.358545464.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Details

Name:	00000002.00000003.461868049.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000000.00000002.370977576.000001B863CE5000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B863CE5000
Size:	4096

Details

Name:	0000000C.00000003.550928059.0000000000C9B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9B000
Size:	4096

Details

Name:	0000000D.00000003.497006000.0000000005AB4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB4000
Size:	40960

Details

Name:	00000001.00000003.358075673.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	110592

Details

Name:	0000000B.00000002.599287046.0000006F81B7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F81B7E000
Size:	8192

Details

Name:	00000010.00000002.608787059.000001D3FCFF0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FCFF0000
Size:	4096

Details

Name:	0000000B.00000002.607591800.0000022952950000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22952950000
Size:	4096

Details

Name:	0000000D.00000003.499881398.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	36864

Details

Name:	00000002.00000002.600826816.00000000007D2000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7D2000
Size:	4096

Details

Name:	0000000C.00000003.452915408.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	16384

Details

Name:	0000000F.00000003.517951056.0000000002131000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	4096

Details

Name:	00000003.00000002.600163230.00000000005A2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A2000
Size:	4096

Details

Name:	0000000D.00000003.501058657.0000000005AC0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC0000
Size:	45056

Details

Name:	00000008.00000003.394373540.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000B.00000002.600658611.0000022951EAC000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EAC000
Size:	20480

Details

Name:	0000000D.00000002.616595113.000000000867E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	867E000
Size:	8192

Details

Name:	0000000D.00000003.498981974.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000008.00000002.397318674.00007FFD06840000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06840000
Size:	8192

Details

Name:	0000000B.00000002.600522163.0000022951DD9000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22951DD9000
Size:	28672

Details

Name:	00000003.00000002.610946800.000000001B1B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B1B0000
Size:	61440

Details

Name:	0000000D.00000003.500756145.0000000005AE4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE4000
Size:	4096

Details

Name:	0000000D.00000003.498378791.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.495398389.0000000005AB7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB7000
Size:	8192

Details

Name:	00000003.00000002.601889755.00000000021B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21B0000
Size:	65536

Details

Name:	00000010.00000002.600934810.000001D3FBC41000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC41000
Size:	81920

Details

Name:	00000003.00000003.369091147.00000000006B2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B2000
Size:	12288

Details

Name:	0000000B.00000003.558118124.0000022951EB7000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB7000
Size:	16384

Details

Name:	0000000C.00000003.452572065.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	65536

Details

Name:	00000001.00000003.358260065.0000000000A80000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A80000
Size:	65536

Details

Name:	0000000D.00000003.495894278.0000000005ADA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	32768

Details

Name:	0000000D.00000003.499761839.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000001.00000002.368734732.0000000002406000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2406000
Size:	8192

Details

Name:	00000008.00000002.397123926.000000001BAAE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAAE000
Size:	8192

Details

Name:	0000000D.00000002.602625600.0000000001354000.00000040.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	1354000
Size:	4096

Details

Name:	00000003.00000002.602183406.0000000002220000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2220000
Size:	4096

Details

Name:	0000000D.00000003.495786901.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	32768

Details

Name:	0000000F.00000002.518614326.000000000059E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59E000
Size:	8192

Details

Name:	00000000.00000003.369714629.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	0000000E.00000002.513988591.0000000000386000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	386000
Size:	4096

Details

Name:	00000000.00000003.342056519.000001B866171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866171000
Size:	114688

Details

Name:	00000000.00000002.370707398.0000001D3A3FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3A3FB000
Size:	20480

Details

Name:	0000000D.00000003.494047923.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000C.00000003.452488705.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	32768

Details

Name:	0000000B.00000003.421142080.0000022951E16000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E16000
Size:	4096

Details

Name:	00000003.00000003.373661047.000000001B170000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B170000
Size:	20480

Details

Name:	0000000D.00000002.612722157.000000000541E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	541E000
Size:	8192

Details

Name:	00000003.00000003.374896478.00000000006AA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AA000
Size:	20480

Details

Name:	00000002.00000003.461555092.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	4096

Details

Name:	00000000.00000003.343155427.000001B865BC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC0000
Size:	16384

Details

Name:	0000000D.00000003.493335179.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000003.494801609.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000001.00000003.357901216.000000001B060000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B060000
Size:	65536

Details

Name:	00000010.00000002.609975686.00007FF5CFB07000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFB07000
Size:	8192

Details

Name:	0000000D.00000003.499352401.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000010.00000003.524379620.000001D3FD4B3000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD4B3000
Size:	8192

Details

Name:	00000001.00000002.369773638.00007FFD06810000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06810000
Size:	4096

Details

Name:	0000000D.00000003.497243652.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	0000000D.00000003.501028316.0000000005AEC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEC000
Size:	20480

Details

Name:	00000002.00000002.600037909.00000000006A2000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6A2000
Size:	4096

Details

Name:	0000000D.00000003.498285919.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	24576

Details

Name:	0000000D.00000003.495241068.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000010.00000002.610726640.00007FF5CFF33000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF33000
Size:	8192

Details

Name:	00000008.00000002.396058189.0000000000F7D000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F7D000
Size:	184320

Details

Name:	00000003.00000003.374858281.000000000069C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69C000
Size:	53248

Details

Name:	00000003.00000003.368776953.000000001AF40000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF40000
Size:	65536

Details

Name:	0000000F.00000002.518882760.00000000022A0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22A0000
Size:	8192

Details

Name:	0000000D.00000002.601888472.0000000001070000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1070000
Size:	565248

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery
Creates a DirectInput object (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000B.00000002.608479845.00007FF57E5E7000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E5E7000
Size:	4096

Details

Name:	00000002.00000003.413905154.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	00000003.00000003.368193930.000000001AFF0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AFF0000
Size:	65536

Details

Name:	00000002.00000003.509454917.0000000006183000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6183000
Size:	12288

Details

Name:	00000000.00000002.373480555.000001B865C80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C80000
Size:	12288

Details

Name:	0000000C.00000002.600531780.0000000000F1B000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F1B000
Size:	4096

Details

Name:	00000003.00000002.611114412.00007FFD066B6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD066B6000
Size:	4096

Details

Name:	00000000.00000003.340959609.000001B865F9A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9A000
Size:	16384

Details

Name:	00000001.00000002.369589037.000000001B3CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B3CE000
Size:	8192

Details

Name:	0000000C.00000003.445056291.00000000050F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F0000
Size:	4096

Details

Name:	00000000.00000002.374361806.000001B866DD0000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866DD0000
Size:	40960

Details

Name:	00000000.00000003.335621222.000001B865C8D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C8D000
Size:	729088

Details

Name:	00000000.00000003.369385452.000001B867333000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867333000
Size:	4096

Details

Name:	0000000D.00000003.498837679.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.550919826.0000000000C99000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	0000000D.00000003.513129102.0000000007D99000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D99000
Size:	172032

Details

Name:	00000003.00000002.602061078.0000000002206000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2206000
Size:	4096

Details

Name:	0000000B.00000002.608606578.00007FF57E65B000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E65B000
Size:	16384

Details

Name:	00000002.00000002.613075046.0000000004990000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4990000
Size:	4096

Details

Name:	00000010.00000002.601951617.000001D3FBC9F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC9F000
Size:	4096

Details

Name:	0000000D.00000003.500965622.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	12288

Details

Name:	00000008.00000003.394198179.000000001B8E0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8E0000
Size:	65536

Details

Name:	00000002.00000003.448141619.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	00000000.00000003.340516433.000001B8665AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665AF000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.602661168.000000000139D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	139D000
Size:	12288

Details

Name:	0000000D.00000003.492360351.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000002.00000003.461593981.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000C.00000003.452664747.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000008.00000003.394248171.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	00000003.00000002.609940056.000000001AE9B000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1AE9B000
Size:	86016

Details

Name:	0000000C.00000003.486898101.0000000006C50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C50000
Size:	16384

Details

Name:	00000000.00000003.332162447.000001B863E12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863E12000
Size:	24576

Details

Name:	00000002.00000002.613457356.0000000005030000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5030000
Size:	8192

Details

Name:	0000000C.00000003.516920614.0000000000C9E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	4096

Details

Name:	0000000B.00000003.543107665.0000022951EB1000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB1000
Size:	16384

Details

Name:	00000003.00000003.367889529.00000000006C4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C4000
Size:	4096

Details

Name:	00000000.00000002.376341123.00007FF5C6A0A000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6A0A000
Size:	12288

Details

Name:	00000010.00000002.610322353.00007FF5CFD81000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFD81000
Size:	16384

Details

Name:	0000000D.00000003.498342329.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	00000003.00000003.374594008.000000000069C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69C000
Size:	32768

Details

Name:	00000000.00000002.373627611.000001B865F9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9B000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.600396061.0000000000D20000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	D20000
Size:	806912

Details

Name:	00000000.00000003.368982618.000001B865C7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7B000
Size:	4096

Details

Name:	0000000D.00000002.600308645.0000000000BA9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BA9000
Size:	4096

Details

Name:	0000000C.00000002.602048252.0000000002B49000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B49000
Size:	12288

Details

Name:	00000001.00000002.368526870.0000000000A5A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A5A000
Size:	24576

Details

Name:	00000010.00000002.610476560.00007FF5CFE41000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE41000
Size:	8192

Details

Name:	0000000B.00000002.608357550.00007FF57E5D6000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E5D6000
Size:	16384

Details

Name:	00000002.00000003.461602017.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	0000000D.00000002.602437738.00000000012AE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12AE000
Size:	8192

Details

Name:	00000002.00000002.613990121.0000000006270000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6270000
Size:	4096

Details

Name:	00000000.00000002.376014993.00007FF5C695A000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C695A000
Size:	24576

Details

Name:	0000000D.00000003.500227417.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	0000000C.00000003.582739643.0000000000C9B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9B000
Size:	4096

Details

Name:	00000002.00000003.427532626.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	0000000D.00000003.522640239.0000000007FC0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7FC0000
Size:	8192

Details

Name:	0000000C.00000003.486987471.0000000006C80000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	65536

Details

Name:	00000008.00000003.394167309.000000001B900000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B900000
Size:	57344

Details

Name:	0000000D.00000003.500156336.0000000005ADF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADF000
Size:	12288

Details

Name:	00000000.00000003.331631043.000001B865C90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C90000
Size:	716800

Details

Name:	00000003.00000003.367874925.00000000006BD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BD000
Size:	8192

Details

Name:	00000003.00000002.609526724.0000000012591000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12591000
Size:	12288

Details

Name:	0000000B.00000002.607571101.00000229528E0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	229528E0000
Size:	4096

Details

Name:	00000001.00000003.358092139.00000000006B0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B0000
Size:	8192

Details

Name:	0000000D.00000003.511676761.0000000008160000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8160000
Size:	61440

Details

Name:	0000000D.00000003.511588009.0000000008180000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8180000
Size:	40960

Details

Name:	00000003.00000003.367596374.0000000000673000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	00000010.00000003.524387962.000001D3FD4B6000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD4B6000
Size:	12288

Details

Name:	00000008.00000002.396227986.00000000011D0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	4096

Details

Name:	0000000C.00000001.429793171.00000000006E0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E0000
Size:	4096

Details

Name:	00000003.00000003.373697374.00000000021D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21D0000
Size:	65536

Details

Name:	00000008.00000003.394320270.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000D.00000003.498453756.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000000.00000003.340081685.000001B866176000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866176000
Size:	12288

Details

Name:	00000000.00000003.370075382.000001B863DC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DC2000
Size:	8192

Details

Name:	00000003.00000003.373541473.000000001B1C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B1C5000
Size:	45056

Details

Name:	00000008.00000002.396355855.0000000001220000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1220000
Size:	12288

Details

Name:	00000003.00000002.602038308.0000000002203000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2203000
Size:	8192

Details

Name:	00000000.00000002.372392950.000001B865820000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B865820000
Size:	4096

Details

Name:	0000000F.00000003.517927989.0000000002129000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2129000
Size:	4096

Details

Name:	0000000D.00000002.616560215.000000000863E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	863E000
Size:	8192

Details

Name:	00000001.00000003.357424934.000000000068B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68B000
Size:	8192

Details

Name:	0000000F.00000003.518039083.000000000212D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	212D000
Size:	8192

Details

Name:	0000000B.00000002.608644875.00007FF57E686000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E686000
Size:	16384

Details

Name:	00000008.00000003.392561706.0000000000FEA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FEA000
Size:	4096

Details

Name:	00000010.00000002.610343974.00007FF5CFDB1000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFDB1000
Size:	4096

Details

Name:	00000000.00000003.354089887.000001B865D3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D3F000
Size:	184320

Details

Name:	00000000.00000002.375386913.00007FF5C6422000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6422000
Size:	8192

Details

Name:	00000000.00000003.367896473.000001B865F57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F57000
Size:	32768

Details

Name:	00000002.00000002.599943555.000000000068A000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	68A000
Size:	8192

Details

Name:	0000000D.00000003.499304896.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000008.00000002.397111242.000000001B9A0000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B9A0000
Size:	4096

Details

Name:	00000000.00000003.331733329.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	0000000C.00000003.430246975.0000000001170000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1170000
Size:	16384

Details

Name:	0000000C.00000002.610844081.000000000506F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	506F000
Size:	196608

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.613009463.00000000069BE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	69BE000
Size:	8192

Details

Name:	00000003.00000002.600294165.000000000060C000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	60C000
Size:	114688

Details

Name:	00000000.00000003.341052532.000001B8661F3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661F3000
Size:	12288

Details

Name:	00000002.00000002.601249892.0000000000E40000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	E40000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000D.00000003.494767535.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	0000000D.00000003.500454756.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	00000001.00000002.369644817.00007FF444E50000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FF444E50000
Size:	4096

Details

Name:	00000008.00000003.393751119.000000000100F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100F000
Size:	61440

Details

Name:	00000002.00000003.433450312.0000000005A80000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A80000
Size:	2621440

Details

Name:	0000000D.00000003.494591560.0000000005AA2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA2000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.501103541.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000F.00000002.518182480.000000000017E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E000
Size:	8192

Details

Name:	00000002.00000002.613970008.0000000006182000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6182000
Size:	4096

Details

Name:	00000003.00000002.600571668.000000000067B000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	67B000
Size:	188416

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000D.00000003.498961860.0000000005ADF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADF000
Size:	4096

Details

Name:	00000010.00000003.523342770.000001D3FC518000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC518000
Size:	4096

Details

Name:	00000001.00000003.358103455.00000000006B0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B0000
Size:	8192

Details

Name:	00000003.00000003.373336546.00000000006EC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6EC000
Size:	28672

Details

Name:	00000003.00000003.374518535.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	16384

Details

Name:	00000003.00000003.374489780.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	36864

Details

Name:	00000000.00000003.340164232.000001B865FA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA7000
Size:	884736

Details

Name:	00000000.00000002.375366370.00007FF5C62F1000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C62F1000
Size:	4096

Details

Name:	00000001.00000003.358115839.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	73728

Details

Name:	0000000D.00000003.500032680.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000000.00000003.369257218.000001B865F4C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F4C000
Size:	8192

Details

Name:	0000000C.00000002.611970041.0000000005620000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5620000
Size:	12288

Details

Name:	00000000.00000003.342270096.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	90112

Details

Name:	00000000.00000003.342656111.000001B86659F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86659F000
Size:	61440

Details

Name:	00000010.00000002.599900409.000001D3FBB20000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1D3FBB20000
Size:	12288

Details

Name:	0000000D.00000002.600010073.0000000000B7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B7E000
Size:	12288

Details

Name:	00000002.00000003.461561467.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000D.00000003.500951818.0000000005AC8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC8000
Size:	4096

Details

Name:	0000000D.00000003.493300012.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000000.00000003.368555115.000001B865C7C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7C000
Size:	86016

Details

Name:	00000001.00000002.369655266.00007FFD06690000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD06690000
Size:	8192

Details

Name:	00000001.00000002.369581637.000000001B2CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B2CE000
Size:	8192

Details

Name:	0000000D.00000003.500573181.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	0000000D.00000003.492608708.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000002.373397068.000001B865B94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B94000
Size:	16384

Details

Name:	0000000D.00000002.615155541.000000000754F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	754F000
Size:	4096

Details

Name:	0000000D.00000002.609383215.0000000003126000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3126000
Size:	4096

Details

Name:	0000000D.00000003.497477343.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	0000000D.00000003.496236365.0000000005AE1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE1000
Size:	8192

Details

Name:	0000000F.00000003.516257869.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000B.00000002.600695191.0000022951ED0000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22951ED0000
Size:	16384

Details

Name:	0000000D.00000003.500979172.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	61440

Details

Name:	00000003.00000002.599296182.0000000000020000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20000
Size:	8192

Details

Name:	00000000.00000002.370661448.0000001D39FFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D39FFA000
Size:	24576

Details

Name:	0000000C.00000002.613036771.0000000006C40000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6C40000
Size:	4096

Details

Name:	0000000F.00000002.518773581.0000000000950000.00000002.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	950000
Size:	32768

Details

Name:	0000000C.00000003.452990246.0000000000C97000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	32768

Details

Name:	00000010.00000002.609362975.000001D3FD421000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD421000
Size:	53248

Details

Name:	00000003.00000002.610084332.000000001AEE4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEE4000
Size:	49152

Details

Name:	00000002.00000002.613955160.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	45056

Details

Name:	00000008.00000003.394384902.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	4096

Details

Name:	00000008.00000003.394347171.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	0000000C.00000002.600501356.0000000000F12000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F12000
Size:	4096

Details

Name:	00000003.00000002.600078490.0000000000550000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	550000
Size:	12288

Details

Name:	00000008.00000003.393117755.000000000100F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100F000
Size:	139264

Details

Name:	00000000.00000003.368707960.000001B865C86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C86000
Size:	45056

Details

Name:	00000000.00000002.373372829.000001B865B7C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B7C000
Size:	8192

Details

Name:	0000000D.00000003.495512447.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	114688

Details

Name:	0000000D.00000002.609345750.000000000311C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	311C000
Size:	20480

Details

Name:	00000003.00000002.608346203.0000000002591000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2591000
Size:	1986560

Details

Name:	00000010.00000002.601890175.000001D3FBC94000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC94000
Size:	40960

Details

Name:	00000002.00000002.601147860.0000000000AB0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	AB0000
Size:	36864

Details

Name:	0000000C.00000003.452635843.0000000005A16000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A16000
Size:	40960

Details

Name:	0000000D.00000003.500257342.0000000005AB9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB9000
Size:	20480

Details

Name:	00000000.00000003.340376934.000001B865FAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAF000
Size:	434176

Details

Name:	00000000.00000002.373790075.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	61440

Details

Name:	00000003.00000002.609115579.0000000002777000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2777000
Size:	851968

Details

Name:	0000000D.00000002.602404186.000000000126E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	126E000
Size:	8192

Details

Name:	0000000D.00000003.500280903.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	24576

Details

Name:	00000008.00000003.392928244.000000000103C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	103C000
Size:	12288

Details

Name:	0000000C.00000003.452032969.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	8192

Details

Name:	00000000.00000003.370441892.000001B865B92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B92000
Size:	4096

Details

Name:	0000000D.00000003.500861060.0000000005AE4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE4000
Size:	8192

Details

Name:	00000008.00000002.395857615.0000000000BC6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BC6000
Size:	40960

Details

Name:	00000008.00000003.393835815.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	00000002.00000003.413934020.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000008.00000003.394134625.000000001B940000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B940000
Size:	45056

Details

Name:	0000000D.00000002.612312199.000000000512C000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	512C000
Size:	114688

Details

Name:	0000000F.00000002.518682806.00000000008DF000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8DF000
Size:	4096

Details

Name:	00000008.00000002.396173671.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	0000000D.00000002.601838752.0000000001050000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1050000
Size:	4096

Details

Name:	00000002.00000002.613877200.0000000005690000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5690000
Size:	12288

Details

Name:	00000010.00000002.610506726.00007FF5CFE5D000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE5D000
Size:	20480

Details

Name:	00000000.00000003.334364852.000001B865C7C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7C000
Size:	798720

Details

Name:	00000000.00000003.341079475.000001B865FA4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA4000
Size:	12288

Details

Name:	00000000.00000003.369358232.000001B867337000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867337000
Size:	4096

Details

Name:	00000000.00000003.368833102.000001B865B8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B8A000
Size:	4096

Details

Name:	00000010.00000002.610353174.00007FF5CFDC5000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFDC5000
Size:	12288

Details

Name:	00000003.00000002.600426247.000000000063E000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	63E000
Size:	180224

Details

Name:	00000002.00000002.599462340.00000000004F6000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	8192

Details

Name:	00000008.00000003.393434937.000000001B940000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B940000
Size:	65536

Details

Name:	00000010.00000002.610365023.00007FF5CFDF5000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFDF5000
Size:	32768

Details

Name:	0000000B.00000002.608321101.00007FF57E5A4000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E5A4000
Size:	20480

Details

Name:	00000000.00000003.331492765.000001B865D1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D1E000
Size:	4096

Details

Name:	00000002.00000002.611182354.000000000393F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	393F000
Size:	397312

Details

Name:	00000000.00000003.332971699.000001B866319000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866319000
Size:	4096

Details

Name:	00000000.00000002.375524381.00007FF5C6729000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6729000
Size:	4096

Details

Name:	0000000D.00000002.601797580.0000000001036000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1036000
Size:	8192

Details

Name:	0000000C.00000003.452384405.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	0000000B.00000002.608095950.00007FF57DE06000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DE06000
Size:	4096

Details

Name:	0000000D.00000002.612675315.00000000052C0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52C0000
Size:	4096

Details

Name:	0000000C.00000002.599410195.0000000000AF9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AF9000
Size:	28672

Details

Name:	00000000.00000002.372448717.000001B865830000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B865830000
Size:	3371008

Details

Name:	00000003.00000002.600870487.0000000000800000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	800000
Size:	36864

Details

Name:	0000000D.00000003.494666837.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	12288

Details

Name:	0000000D.00000003.493529141.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000B.00000003.543186466.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	77824

Details

Name:	0000000D.00000002.601994592.00000000010FB000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	10FB000
Size:	73728

Details

Name:	0000000D.00000003.495068815.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000003.00000003.367969044.000000001B030000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B030000
Size:	28672

Details

Name:	00000000.00000003.332334070.000001B86672B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86672B000
Size:	626688

Details

Name:	0000000C.00000002.609011465.0000000004C90000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	4C90000
Size:	3371008

Details

Name:	0000000D.00000003.499292000.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Details

Name:	0000000B.00000002.600682682.0000022951EB7000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB7000
Size:	16384

Details

Name:	0000000C.00000002.608937071.0000000003AF1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3AF1000
Size:	20480

Details

Name:	00000000.00000002.374058721.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	00000001.00000002.368546638.0000000000A90000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	A90000
Size:	20480

Details

Name:	0000000C.00000002.599601875.0000000000C54000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	16384

Details

Name:	00000003.00000003.374841460.00000000006B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B8000
Size:	40960

Details

Name:	0000000D.00000003.499261186.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	32768

Details

Name:	00000000.00000002.370672113.0000001D3A0FF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3A0FF000
Size:	4096

Details

Name:	0000000D.00000003.494906215.0000000005ACD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACD000
Size:	4096

Details

Name:	00000010.00000003.516362177.000001D3FD2D0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2D0000
Size:	4096

Details

Name:	0000000D.00000003.504921266.0000000008280000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8280000
Size:	53248

Details

Name:	0000000D.00000003.499506372.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000008.00000003.392602122.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	77824

Details

Name:	00000003.00000003.368814836.000000001AF30000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF30000
Size:	65536

Details

Name:	00000010.00000002.610457595.00007FF5CFE34000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE34000
Size:	8192

Details

Name:	00000002.00000003.439964585.0000000005A80000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A80000
Size:	2621440

Details

Name:	00000003.00000003.373272068.000000000069B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69B000
Size:	8192

Details

Name:	0000000D.00000003.500434604.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	0000000C.00000002.602330275.0000000002B78000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B78000
Size:	12288

Details

Name:	00000000.00000002.373937289.000001B8665AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665AF000
Size:	40960

Details

Name:	0000000D.00000003.495855844.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	00000002.00000002.602565530.00000000023C0000.00000040.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	23C0000
Size:	8192

Details

Name:	00000002.00000002.613207285.0000000004C7E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4C7E000
Size:	8192

Details

Name:	00000001.00000002.368729017.0000000002403000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2403000
Size:	8192

Details

Name:	00000000.00000002.373554833.000001B865F57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F57000
Size:	32768

Details

Name:	0000000B.00000003.558153273.0000022952C20000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22952C20000
Size:	20480

Details

Name:	0000000C.00000002.612558630.0000000005A10000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5A10000
Size:	16384

Details

Name:	00000000.00000003.331756866.000001B865B91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B91000
Size:	40960

Details

Name:	00000000.00000003.361904315.000001B866019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866019000
Size:	81920

Details

Name:	00000001.00000002.369595816.000000001B4CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B4CE000
Size:	8192

Details

Name:	00000002.00000002.600145584.00000000006D0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6D0000
Size:	16384

Details

Name:	0000000E.00000002.514130897.0000000000530000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	4096

Details

Name:	00000002.00000002.600918050.0000000000A70000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A70000
Size:	65536

Details

Name:	0000000D.00000003.495725552.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.518643389.00000000006A8000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6A8000
Size:	147456

Details

Name:	00000002.00000002.613448582.0000000005020000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5020000
Size:	4096

Details

Name:	0000000D.00000003.500301415.0000000005AAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAC000
Size:	53248

Details

Name:	00000001.00000003.357447268.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Details

Name:	00000000.00000003.331514057.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000002.00000002.613277593.0000000004F40000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	4F40000
Size:	733184

Details

Name:	00000001.00000002.368711961.00000000023F4000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23F4000
Size:	36864

Details

Name:	00000000.00000003.339966109.000001B866181000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866181000
Size:	69632

Details

Name:	00000010.00000003.516195343.000001D3FD2E0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2E0000
Size:	8192

Details

Name:	00000000.00000003.342228455.000001B866192000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866192000
Size:	86016

Details

Name:	0000000C.00000003.580667488.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	00000008.00000003.393674981.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	00000000.00000003.370454048.000001B865B94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B94000
Size:	16384

Details

Name:	00000010.00000002.610692187.00007FF5CFF07000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF07000
Size:	32768

Details

Name:	0000000D.00000003.492157935.0000000005AA2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA2000
Size:	4096

Details

Name:	0000000C.00000003.443061818.00000000050F6000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F6000
Size:	40960

Details

Name:	0000000C.00000002.601116850.0000000002A9E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A9E000
Size:	8192

Details

Name:	0000000F.00000002.518198673.0000000000196000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	196000
Size:	40960

Details

Name:	00000000.00000003.370501325.000001B865BBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BBD000
Size:	16384

Details

Name:	0000000D.00000002.613576906.0000000005BB0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5BB0000
Size:	507904

Details

Name:	00000000.00000002.375238393.00007FF5AD6B5000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5AD6B5000
Size:	4096

Details

Name:	0000000D.00000003.493432567.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000002.611882180.0000000005604000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5604000
Size:	36864

Details

Name:	0000000D.00000003.492217040.0000000005AA2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA2000
Size:	8192

Details

Name:	00000003.00000003.374508628.00000000006A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A4000
Size:	20480

Details

Name:	00000002.00000002.613153903.0000000004A3E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4A3E000
Size:	8192

Details

Name:	00000002.00000003.379465935.0000000004980000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4980000
Size:	16384

Details

Name:	00000010.00000002.602517664.000001D3FC3F0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC3F0000
Size:	8192

Details

Name:	00000003.00000002.611327067.00007FFD067E0000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD067E0000
Size:	45056

Details

Name:	00000000.00000003.341147185.000001B86601F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86601F000
Size:	45056

Details

Name:	00000000.00000003.368920979.000001B865BB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB4000
Size:	16384

Details

Name:	0000000C.00000003.452817260.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	65536

Details

Name:	0000000C.00000002.612987032.00000000068BE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	68BE000
Size:	8192

Details

Name:	00000000.00000003.341281082.000001B865F8D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F8D000
Size:	53248

Details

Name:	00000010.00000002.609465113.000001D3FD44A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD44A000
Size:	24576

Details

Name:	00000008.00000003.393974088.000000000100F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100F000
Size:	98304

Details

Name:	0000000D.00000003.501502042.0000000001115000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1115000
Size:	8192

Details

Name:	0000000D.00000003.498598489.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	20480

Details

Name:	00000008.00000002.396438221.0000000002BDE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDE000
Size:	8192

Details

Name:	0000000C.00000002.600387058.0000000000EED000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	EED000
Size:	4096

Details

Name:	00000000.00000002.373954176.000001B8665BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665BF000
Size:	147456

Details

Name:	0000000D.00000003.504717250.0000000001166000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1166000
Size:	8192

Details

Name:	0000000D.00000003.498250569.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	24576

Details

Name:	0000000E.00000002.514190913.00000000006A0000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	4096

Details

Name:	00000008.00000003.393073697.0000000001043000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1043000
Size:	4096

Details

Name:	0000000D.00000002.615593705.00000000077A0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	77A0000
Size:	319488

Details

Name:	0000000D.00000003.505330187.00000000077E5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77E5000
Size:	20480

Details

Name:	00000010.00000002.609061417.000001D3FD2A0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2A0000
Size:	4096

Details

Name:	00000000.00000003.365571408.000001B865E71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865E71000
Size:	708608

Details

Name:	0000000C.00000003.452710368.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000003.00000002.600532331.000000000066B000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	66B000
Size:	61440

Details

Name:	0000000D.00000003.493470689.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000002.613729778.0000000005C40000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	4096

Details

Name:	00000001.00000002.365911476.0000000000570000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	570000
Size:	8192

Details

Name:	00000001.00000002.368577157.0000000000AE0000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	AE0000
Size:	12288

Details

Name:	00000002.00000003.447907078.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	00000008.00000003.393565142.000000001B8E0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8E0000
Size:	65536

Details

Name:	00000002.00000002.613616664.00000000051DC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51DC000
Size:	16384

Details

Name:	0000000D.00000003.501519477.000000000111C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	111C000
Size:	12288

Details

Name:	00000000.00000003.331724119.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	0000000D.00000003.493788699.0000000005AB5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB5000
Size:	4096

Details

Name:	00000010.00000002.604172151.000001D3FCC80000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC80000
Size:	3371008

Details

Name:	00000002.00000002.613643735.000000000531C000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	531C000
Size:	16384

Details

Name:	00000003.00000003.368552407.000000001AF70000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF70000
Size:	65536

Details

Name:	00000001.00000003.358001893.0000000000696000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	61440

Details

Name:	0000000D.00000002.612263418.0000000005120000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5120000
Size:	20480

Details

Name:	0000000C.00000003.450598498.00000000050A2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50A2000
Size:	65536

Details

Name:	00000000.00000002.370576537.0000001D398F3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D398F3000
Size:	53248

Details

Name:	00000000.00000002.373386511.000001B865B8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B8A000
Size:	4096

Details

Name:	00000003.00000003.368124085.000000001B010000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B010000
Size:	20480

Details

Name:	00000000.00000003.342605661.000001B866C05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C05000
Size:	20480

Details

Name:	00000002.00000002.613691144.00000000053EB000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	53EB000
Size:	4096

Details

Name:	0000000D.00000002.615830669.0000000007ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7ADB000
Size:	20480

Details

Name:	0000000D.00000003.495620617.0000000005AB5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB5000
Size:	40960

Details

Name:	00000001.00000003.357628699.00000000006E0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6E0000
Size:	32768

Details

Name:	00000000.00000003.333053417.000001B8660D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8660D2000
Size:	409600

Details

Name:	00000008.00000003.393861316.000000000102A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	0000000C.00000002.600487322.0000000000F0A000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F0A000
Size:	8192

Details

Name:	00000010.00000002.609770871.00007FF5CF593000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF593000
Size:	28672

Details

Name:	00000001.00000003.357651579.00000000006C6000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C6000
Size:	4096

Details

Name:	00000000.00000003.369919040.000001B866189000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866189000
Size:	16384

Details

Name:	0000000C.00000003.550864041.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	45056

Details

Name:	00000000.00000003.369365400.000001B867336000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867336000
Size:	4096

Details

Name:	00000008.00000003.393267973.000000001B9F0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9F0000
Size:	20480

Details

Name:	00000008.00000002.397204461.00007FFD066C6000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066C6000
Size:	12288

Details

Name:	00000008.00000003.392596724.0000000000FEA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FEA000
Size:	4096

Details

Name:	00000000.00000002.370928888.000001B863CE0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B863CE0000
Size:	16384

Details

Name:	0000000F.00000003.516344527.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	00000003.00000000.364571687.00000000000A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A0000
Size:	4096

Details

Name:	00000000.00000003.333049167.000001B86620A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86620A000
Size:	4096

Details

Name:	0000000C.00000003.550889808.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	188416

Details

Name:	0000000D.00000003.500885444.0000000005AEF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEF000
Size:	4096

Details

Name:	00000003.00000002.611350682.00007FFD06820000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06820000
Size:	12288

Details

Name:	0000000D.00000003.496210177.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	00000008.00000001.392062916.0000000000A70000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	A70000
Size:	4096

Details

Name:	0000000D.00000003.492815355.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000008.00000002.396321683.0000000001201000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1201000
Size:	61440

Details

Name:	0000000C.00000002.600345529.0000000000ED0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ED0000
Size:	8192

Details

Name:	00000008.00000002.396906453.0000000012F27000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F27000
Size:	16384

Details

Name:	0000000B.00000003.543071551.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	94208

Details

Name:	00000003.00000003.373602366.000000001B140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B140000
Size:	65536

Details

Name:	0000000B.00000002.600417318.0000022951D90000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951D90000
Size:	8192

Details

Name:	00000001.00000003.357747538.000000001B140000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B140000
Size:	20480

Details

Name:	00000000.00000003.361100730.000001B8661FE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661FE000
Size:	53248

Details

Name:	0000000B.00000002.600867644.0000022952590000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22952590000
Size:	3371008

Details

Name:	0000000C.00000002.599828683.0000000000D00000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	D00000
Size:	806912

Details

Name:	0000000D.00000002.604464745.0000000002CD0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2CD0000
Size:	20480

Details

Name:	0000000D.00000003.492769126.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000F.00000003.516429381.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000000.00000002.376119626.00007FF5C698E000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C698E000
Size:	20480

Details

Name:	0000000C.00000002.601958073.0000000002B38000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B38000
Size:	4096

Details

Name:	00000003.00000003.373490084.00000000021A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21A0000
Size:	65536

Details

Name:	00000000.00000002.374049726.000001B866C08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C08000
Size:	8192

Details

Name:	0000000C.00000003.487026139.0000000006C50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C50000
Size:	65536

Details

Name:	00000000.00000003.339554958.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	204800

Details

Name:	0000000D.00000003.497700571.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Details

Name:	00000010.00000002.610494991.00007FF5CFE53000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE53000
Size:	24576

Details

Name:	0000000B.00000003.426576794.0000022951E7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7E000
Size:	4096

Details

Name:	00000008.00000002.397263190.00007FFD0678A000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0678A000
Size:	4096

Details

Name:	00000001.00000003.358241129.000000001B040000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B040000
Size:	65536

Details

Name:	0000000D.00000003.497119272.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	00000001.00000003.357695002.0000000000696000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	139264

Details

Name:	0000000D.00000003.492600951.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	0000000D.00000003.498160458.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	24576

Details

Name:	00000003.00000003.374536564.0000000000694000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	4096

Details

Name:	00000000.00000003.369560239.000001B863DC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DC6000
Size:	49152

Details

Name:	0000000D.00000003.496422763.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	8192

Details

Name:	00000001.00000003.357910501.000000001B050000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B050000
Size:	65536

Details

Name:	0000000D.00000002.601748872.0000000001020000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1020000
Size:	8192

Details

Name:	0000000D.00000003.505372234.00000000077F5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77F5000
Size:	12288

Details

Name:	0000000D.00000003.495278765.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	12288

Details

Name:	0000000D.00000003.496259607.0000000005AAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAC000
Size:	77824

Details

Name:	0000000E.00000002.514197969.00000000006B0000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6B0000
Size:	24576

Details

Name:	0000000B.00000002.600780321.0000022951F10000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951F10000
Size:	4096

Details

Name:	00000001.00000003.358222233.000000001B09D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B09D000
Size:	12288

Details

Name:	00000002.00000003.497196753.0000000006183000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6183000
Size:	12288

Details

Name:	0000000C.00000002.599238572.00000000006E0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E0000
Size:	4096

Details

Name:	00000008.00000003.392834374.000000000105E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	105E000
Size:	28672

Details

Name:	00000010.00000002.608989404.000001D3FD270000.00000008.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page write copy
Base address:	1D3FD270000
Size:	4096

Details

Name:	00000001.00000003.357892176.000000001B070000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B070000
Size:	65536

Details

Name:	0000000F.00000003.517211665.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	4096

Details

Name:	00000003.00000003.367610361.000000000067B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	69632

Details

Name:	00000002.00000002.613256990.0000000004DD0000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4DD0000
Size:	12288

Details

Name:	00000010.00000003.524352681.000001D3FC559000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC559000
Size:	4096

Details

Name:	00000010.00000003.524399205.000001D3FC559000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC559000
Size:	4096

Details

Name:	0000000D.00000003.497856997.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	77824

Details

Name:	00000000.00000002.375735858.00007FF5C6878000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6878000
Size:	4096

Details

Name:	0000000D.00000003.498533058.0000000005ADA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	24576

Details

Name:	00000000.00000003.332406810.000001B866693000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866693000
Size:	622592

Details

Name:	0000000D.00000003.498361338.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	32768

Details

Name:	00000001.00000003.358171202.00000000023E0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23E0000
Size:	65536

Details

Name:	0000000D.00000002.602276088.000000000115B000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	115B000
Size:	81920

Details

Name:	0000000F.00000003.516389830.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000E.00000003.513895220.0000000000B9C000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B9C000
Size:	8192

Details

Name:	00000001.00000002.369633230.000000001B8CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8CE000
Size:	8192

Details

Name:	00000003.00000003.373842093.000000001AF00000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF00000
Size:	65536

Details

Name:	00000000.00000003.364865158.000001B8665E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E3000
Size:	49152

Details

Name:	00000003.00000003.369291625.000000001AF00000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF00000
Size:	65536

Details

Name:	0000000D.00000003.501241247.0000000005C90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C90000
Size:	65536

Details

Name:	00000003.00000002.610798416.000000001B0D9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0D9000
Size:	28672

Details

Name:	00000003.00000003.373891502.00000000021E0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21E0000
Size:	65536

Details

Name:	0000000C.00000002.612842766.00000000064FD000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	64FD000
Size:	12288

Details

Name:	00000002.00000002.613125603.00000000049DC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	49DC000
Size:	16384

Details

Name:	00000002.00000003.439848546.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000D.00000002.612276302.0000000005127000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5127000
Size:	12288

Details

Name:	00000002.00000002.600085930.00000000006AB000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	6AB000
Size:	4096

Details

Name:	0000000D.00000003.493326238.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000000.00000003.363386616.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	98304

Details

Name:	00000001.00000003.357787219.000000001B110000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B110000
Size:	65536

Details

Name:	00000003.00000002.610897727.000000001B1A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B1A0000
Size:	4096

Details

Name:	00000002.00000002.599715011.00000000005F0000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	5F0000
Size:	16384

Details

Name:	0000000D.00000003.491878280.00000000057E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57E0000
Size:	8192

Details

Name:	0000000C.00000003.451829713.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	65536

Details

Name:	0000000D.00000003.499806206.0000000005AE7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE7000
Size:	16384

Details

Name:	0000000D.00000003.498299679.0000000005AB4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB4000
Size:	40960

Details

Name:	00000003.00000003.374756617.000000000069C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69C000
Size:	53248

Details

Name:	0000000D.00000003.497752238.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	0000000C.00000002.599552068.0000000000BD1000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BD1000
Size:	4096

Details

Name:	00000002.00000003.433404792.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	4096

Details

Name:	00000003.00000003.374334815.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	16384

Details

Name:	00000000.00000003.369508695.000001B866EE0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B866EE0000
Size:	4096

Details

Name:	00000000.00000003.332402442.000001B866860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866860000
Size:	4096

Details

Name:	0000000C.00000002.600762552.0000000001187000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1187000
Size:	12288

Details

Name:	00000002.00000002.602320853.000000000237B000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	237B000
Size:	86016

Details

Name:	0000000D.00000003.494570200.0000000005ACE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACE000
Size:	4096

Details

Name:	0000000B.00000003.426507527.0000022951E7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7E000
Size:	4096

Details

Name:	00000002.00000002.602253826.000000000235C000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	235C000
Size:	114688

Details

Name:	0000000D.00000003.499647752.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000001.00000003.357830167.000000001B0E0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0E0000
Size:	65536

Details

Name:	0000000D.00000002.613796839.0000000005CC0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5CC0000
Size:	4194304

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.363102319.000001B865FA3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA3000
Size:	8192

Details

Name:	00000008.00000002.396219860.00000000011A0000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	11A0000
Size:	4096

Details

Name:	00000003.00000003.374314295.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	16384

Details

Name:	0000000D.00000002.600321695.0000000000BAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BAC000
Size:	4096

Details

Name:	00000008.00000002.397304983.00007FFD06800000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06800000
Size:	24576

Details

Name:	0000000C.00000003.452625942.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	20480

Details

Name:	0000000C.00000003.445081564.00000000050F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F0000
Size:	4096

Details

Name:	0000000C.00000003.453014920.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	4096

Details

Name:	0000000D.00000002.601218732.0000000000FC7000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	FC7000
Size:	8192

Details

Name:	00000000.00000003.342584903.000001B866207000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866207000
Size:	16384

Details

Name:	00000002.00000002.602492293.00000000023B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23B0000
Size:	12288

Details

Name:	00000000.00000003.343188827.000001B865D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D7D000
Size:	757760

Details

Name:	0000000D.00000002.614934785.0000000007300000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7300000
Size:	970752

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000002.00000003.449739372.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	00000002.00000003.439910976.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	00000000.00000003.342416935.000001B8661C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C7000
Size:	86016

Details

Name:	00000000.00000003.369027201.000001B865B92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B92000
Size:	4096

Details

Name:	00000000.00000003.331436309.000001B865D1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D1E000
Size:	4096

Details

Name:	00000008.00000002.396040404.0000000000F70000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F70000
Size:	49152

Details

Name:	00000000.00000003.339611848.000001B8665AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665AF000
Size:	40960

Details

Name:	0000000D.00000003.493978168.0000000005ACC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACC000
Size:	8192

Details

Name:	00000000.00000003.369136136.000001B865B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9C000
Size:	4096

Details

Name:	00000003.00000003.374104654.00000000006A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A4000
Size:	24576

Details

Name:	00000008.00000003.393995266.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	00000003.00000003.374870315.00000000006AA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AA000
Size:	20480

Details

Name:	0000000F.00000003.516036269.0000000000555000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	00000000.00000002.376091441.00007FF5C6987000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6987000
Size:	4096

Details

Name:	00000000.00000003.361845859.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	98304

Details

Name:	00000001.00000002.367515293.00000000005D0000.00000040.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5D0000
Size:	4096

Details

Name:	00000010.00000002.609799348.00007FF5CF59E000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF59E000
Size:	16384

Details

Name:	0000000D.00000003.492232560.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000002.00000003.405330436.0000000006177000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6177000
Size:	8192

Details

Name:	0000000C.00000002.611794327.00000000055D4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55D4000
Size:	4096

Details

Name:	00000010.00000002.610255647.00007FF5CFCED000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFCED000
Size:	4096

Details

Name:	00000010.00000002.609267941.000001D3FD3C0000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD3C0000
Size:	32768

Details

Name:	0000000C.00000002.599350815.00000000009C0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9C0000
Size:	8192

Details

Name:	0000000D.00000003.495501348.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	0000000C.00000003.450484116.00000000057CA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57CA000
Size:	307200

Details

Name:	0000000C.00000002.599471252.0000000000B90000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B90000
Size:	4096

Details

Name:	0000000C.00000003.452065559.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	16384

Details

Name:	00000002.00000002.613028555.000000000497D000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	497D000
Size:	12288

Details

Name:	00000000.00000002.373474664.000001B865C7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7B000
Size:	4096

Details

Name:	0000000D.00000003.499441635.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000002.00000003.448181118.0000000005A80000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A80000
Size:	2621440

Details

Name:	0000000D.00000002.614650363.0000000006DE2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6DE2000
Size:	1716224

Details

Name:	00000000.00000002.375277922.00007FF5C6222000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6222000
Size:	20480

Details

Name:	0000000D.00000002.602792852.00000000013B8000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	13B8000
Size:	28672

Details

Name:	00000010.00000002.599700201.000000677B1FE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B1FE000
Size:	8192

Details

Name:	00000002.00000003.413942071.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000D.00000002.601785334.0000000001032000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1032000
Size:	4096

Details

Name:	00000003.00000003.373801043.00000000021B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21B0000
Size:	65536

Details

Name:	00000010.00000002.599883881.000001D3FBAC0000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1D3FBAC0000
Size:	4096

Details

Name:	0000000C.00000003.451282166.0000000000C54000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	16384

Details

Name:	00000000.00000003.340500645.000001B86659F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86659F000
Size:	61440

Details

Name:	0000000C.00000003.580584039.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	45056

Details

Name:	0000000C.00000002.608988860.0000000004C8D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4C8D000
Size:	12288

Details

Name:	00000001.00000003.358515741.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Details

Name:	00000000.00000003.368959913.000001B865C88000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C88000
Size:	8192

Details

Name:	00000008.00000003.393643260.0000000000FEC000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FEC000
Size:	4096

Details

Name:	00000010.00000002.608763197.000001D3FCFC1000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FCFC1000
Size:	4096

Details

Name:	00000010.00000002.608895608.000001D3FD1A0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1A0000
Size:	4096

Details

Name:	00000002.00000003.433327295.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000000.00000002.370616019.0000001D39AFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D39AFE000
Size:	8192

Details

Name:	00000002.00000003.433420929.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	0000000F.00000003.516008843.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000003.496533096.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000F.00000002.518167068.000000000009D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	0000000E.00000002.513969695.000000000019C000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Details

Name:	0000000C.00000002.601072088.000000000299E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	299E000
Size:	8192

Details

Name:	0000000C.00000003.451687814.0000000005990000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5990000
Size:	20480

Details

Name:	0000000D.00000003.499383472.0000000005AE2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE2000
Size:	4096

Details

Name:	0000000D.00000003.495093496.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000003.00000002.609717711.00000000125EC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	125EC000
Size:	4096

Details

Name:	00000000.00000003.368970463.000001B865C77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C77000
Size:	4096

Details

Name:	00000001.00000002.365390209.0000000000020000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20000
Size:	8192

Details

Name:	00000001.00000002.368468110.00000000008CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8CE000
Size:	8192

Details

Name:	0000000D.00000003.497441028.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000D.00000003.495918195.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	0000000F.00000003.517328061.000000000210D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	210D000
Size:	61440

Details

Name:	0000000D.00000002.601391416.0000000001000000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1000000
Size:	8192

Details

Name:	00000000.00000002.374043001.000001B866BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866BB2000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara signature match	System Summary

Details

Name:	0000000D.00000003.498655810.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	20480

Details

Name:	0000000D.00000003.496147162.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	40960

Details

Name:	00000000.00000003.363368213.000001B866185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866185000
Size:	32768

Details

Name:	00000001.00000002.369245596.0000000012751000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12751000
Size:	12288

Details

Name:	0000000D.00000003.498572812.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	20480

Details

Name:	0000000B.00000003.543121726.0000022951EA5000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EA5000
Size:	49152

Details

Name:	0000000D.00000003.500203888.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	4096

Details

Name:	0000000C.00000002.611989058.000000000566E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	566E000
Size:	8192

Details

Name:	0000000C.00000002.612664790.0000000005CAE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CAE000
Size:	8192

Details

Name:	0000000D.00000003.495362634.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000010.00000002.602890183.000001D3FCC20000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC20000
Size:	65536

Details

Name:	00000002.00000002.613434337.0000000005010000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5010000
Size:	4096

Details

Name:	0000000D.00000003.499983674.0000000005AA5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA5000
Size:	102400

Details

Name:	0000000D.00000003.500386073.0000000005AE5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE5000
Size:	4096

Details

Name:	00000010.00000002.608797357.000001D3FD030000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD030000
Size:	139264

Details

Name:	00000000.00000003.332905465.000001B866319000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866319000
Size:	4096

Details

Name:	0000000F.00000003.518007114.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	0000000D.00000003.496219801.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	45056

Details

Name:	00000002.00000002.600187678.00000000006E0000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6E0000
Size:	36864

Details

Name:	00000010.00000002.609527999.000001D3FD461000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD461000
Size:	151552

Details

Name:	00000000.00000003.340004399.000001B86619E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86619E000
Size:	36864

Details

Name:	00000001.00000003.357776222.000000001B13C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B13C000
Size:	16384

Details

Name:	00000000.00000002.375909772.00007FF5C693C000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C693C000
Size:	4096

Details

Name:	0000000D.00000003.492685140.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000B.00000002.608211809.00007FF57E4A8000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E4A8000
Size:	12288

Details

Name:	00000008.00000002.396245469.00000000011D4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11D4000
Size:	20480

Details

Name:	0000000F.00000002.518730612.0000000000940000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	940000
Size:	24576

Details

Name:	00000010.00000002.601825285.000001D3FBC8D000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC8D000
Size:	4096

Details

Name:	00000002.00000003.470277825.0000000005B80000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B80000
Size:	2621440

Details

Name:	00000000.00000003.333633689.000001B863DD2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DD2000
Size:	143360

Details

Name:	00000000.00000002.375774167.00007FF5C68D7000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C68D7000
Size:	8192

Details

Name:	0000000C.00000003.580705142.00000000050A2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50A2000
Size:	65536

Details

Name:	0000000D.00000002.615875468.0000000007B1D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7B1D000
Size:	12288

Details

Name:	00000000.00000002.375710972.00007FF5C6848000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6848000
Size:	12288

Details

Name:	00000008.00000003.393870656.000000000102F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102F000
Size:	4096

Details

Name:	00000008.00000002.395988057.0000000000EF0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EF0000
Size:	8192

Details

Name:	00000000.00000003.369370824.000001B867335000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867335000
Size:	4096

Details

Name:	0000000D.00000003.494636931.0000000005ABC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABC000
Size:	4096

Details

Name:	00000003.00000003.368174449.000000001B000000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B000000
Size:	40960

Details

Name:	0000000D.00000002.612821883.000000000559E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	559E000
Size:	8192

Details

Name:	0000000D.00000002.603326629.0000000002C5E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C5E000
Size:	8192

Details

Name:	00000001.00000003.358159624.000000001B0A4000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0A4000
Size:	28672

Details

Name:	0000000D.00000003.492857315.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000002.00000003.405180610.00000000050F8000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F8000
Size:	32768

Details

Name:	0000000F.00000003.517699494.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	0000000C.00000003.451144035.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	40960

Details

Name:	00000002.00000002.613548178.0000000005120000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5120000
Size:	294912

Details

Name:	00000008.00000003.392778755.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	126976

Details

Name:	0000000C.00000002.608973158.0000000004AF8000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4AF8000
Size:	4096

Details

Name:	0000000C.00000003.516711913.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	00000000.00000002.375964108.00007FF5C694D000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C694D000
Size:	20480

Details

Name:	0000000D.00000003.497408020.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	8192

Details

Name:	00000003.00000002.611068462.00007FFD066A2000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066A2000
Size:	45056

Details

Name:	0000000C.00000003.451321446.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	98304

Details

Name:	00000000.00000003.368935129.000001B865BBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BBD000
Size:	16384

Details

Name:	0000000D.00000003.492939051.0000000005AAF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAF000
Size:	4096

Details

Name:	00000000.00000003.360920557.000001B865DBA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865DBA000
Size:	569344

Details

Name:	0000000D.00000002.600100834.0000000000B8E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B8E000
Size:	4096

Details

Name:	0000000D.00000003.493005514.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000003.00000002.601859431.000000000219E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	219E000
Size:	8192

Details

Name:	00000000.00000003.370174382.000001B865F80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F80000
Size:	53248

Details

Name:	00000001.00000003.357321987.0000000000673000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	0000000D.00000003.500809360.0000000005AE4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE4000
Size:	4096

Details

Name:	0000000D.00000002.600248466.0000000000BA0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BA0000
Size:	4096

Details

Name:	0000000C.00000003.452046135.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000002.00000002.599848705.000000000066A000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	66A000
Size:	8192

Details

Name:	00000003.00000002.610988884.000000001B3BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B3BE000
Size:	8192

Details

Name:	0000000D.00000003.493937299.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000002.612937434.00000000057DE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57DE000
Size:	8192

Details

Name:	0000000D.00000003.506941013.00000000077EB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77EB000
Size:	77824

Details

Name:	0000000D.00000003.493159242.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000B.00000002.600836374.00000229524B0000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	229524B0000
Size:	12288

Details

Name:	0000000D.00000003.497097846.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	00000001.00000002.369453538.000000001B0B0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0B0000
Size:	8192

Details

Name:	00000010.00000002.609094880.000001D3FD2E0000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD2E0000
Size:	20480

Details

Name:	00000003.00000002.609613378.000000001259E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1259E000
Size:	299008

Details

Name:	00000010.00000002.609144550.000001D3FD330000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD330000
Size:	12288

Details

Name:	0000000C.00000003.487012830.0000000006C60000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C60000
Size:	65536

Details

Name:	0000000B.00000002.608172784.00007FF57DF11000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DF11000
Size:	12288

Details

Name:	00000008.00000002.397086736.000000001B8D4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8D4000
Size:	36864

Details

Name:	0000000D.00000003.493132937.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000003.500868922.0000000005AE7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE7000
Size:	4096

Details

Name:	0000000D.00000003.495339129.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000008.00000002.396994961.000000001B820000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B820000
Size:	20480

Details

Name:	0000000D.00000003.495080605.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.373509901.000001B865C8C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C8C000
Size:	20480

Details

Name:	0000000C.00000003.582654109.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	00000000.00000003.331858110.000001B866AAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866AAF000
Size:	1417216

Details

Name:	0000000D.00000003.498854780.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000010.00000002.601971223.000001D3FBCA1000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBCA1000
Size:	110592

Details

Name:	0000000D.00000003.493456171.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000002.613511912.0000000005AAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAC000
Size:	73728

Details

Name:	0000000D.00000003.501905557.000000000111F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	111F000
Size:	135168

Details

Name:	00000010.00000002.610714772.00007FF5CFF1A000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF1A000
Size:	12288

Details

Name:	00000000.00000002.370787548.000001B863CC0000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B863CC0000
Size:	12288

Details

Name:	00000000.00000003.370231553.000001B865FAD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAD000
Size:	4096

Details

Name:	00000002.00000002.613713046.00000000055F0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	55F0000
Size:	634880

Details

Name:	00000000.00000003.369301733.000001B863DB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DB4000
Size:	65536

Details

Name:	0000000D.00000003.492704756.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000002.00000002.614021942.000000007FAA0000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FAA0000
Size:	4096

Details

Name:	0000000F.00000003.517880129.0000000002131000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	4096

Details

Name:	00000008.00000002.397004780.000000001B827000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B827000
Size:	12288

Details

Name:	00000008.00000003.393612628.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	00000000.00000002.374080979.000001B866D80000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866D80000
Size:	65536

Details

Name:	00000008.00000002.397067928.000000001B8D0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8D0000
Size:	4096

Details

Name:	00000010.00000002.610570078.00007FF5CFE86000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE86000
Size:	16384

Details

Name:	0000000D.00000003.499698357.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	110592

Details

Name:	0000000D.00000003.500009111.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000003.00000002.611297156.00007FFD067D2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD067D2000
Size:	40960

Details

Name:	0000000D.00000003.491840085.00000000010F4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10F4000
Size:	12288

Details

Name:	00000003.00000002.611201301.00007FFD06760000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD06760000
Size:	4096

Details

Name:	00000000.00000003.341354023.000001B86602B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602B000
Size:	344064

Details

Name:	00000010.00000002.610652296.00007FF5CFEF7000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFEF7000
Size:	20480

Details

Name:	00000008.00000003.394179869.000000001B8F0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8F0000
Size:	65536

Details

Name:	0000000D.00000003.495684208.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	8192

Details

Name:	00000010.00000002.599531362.000000677ADFA000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677ADFA000
Size:	24576

Details

Name:	00000002.00000002.599388891.00000000001F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F0000
Size:	4096

Details

Name:	00000000.00000003.370512816.000001B863CE6000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B863CE6000
Size:	12288

Details

Name:	00000002.00000003.461569355.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	00000000.00000002.375921468.00007FF5C693F000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C693F000
Size:	8192

Details

Name:	0000000D.00000002.612574035.00000000052AE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52AE000
Size:	8192

Details

Name:	00000002.00000003.439936648.0000000006171000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6171000
Size:	4096

Details

Name:	00000000.00000003.340693818.000001B865F73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F73000
Size:	176128

Details

Name:	00000000.00000003.342557239.000001B865F92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F92000
Size:	49152

Details

Name:	0000000F.00000003.517984462.000000000094E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	4096

Details

Name:	0000000C.00000003.484856775.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	0000000C.00000002.600458847.0000000000F02000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F02000
Size:	4096

Details

Name:	00000003.00000003.369255571.000000001AF7D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF7D000
Size:	12288

Details

Name:	0000000B.00000003.426554695.0000022951E52000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E52000
Size:	176128

Details

Name:	00000000.00000003.341913467.000001B866016000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866016000
Size:	36864

Details

Name:	00000010.00000002.602313309.000001D3FC000000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FC000000
Size:	16384

Details

Name:	00000002.00000002.610931525.00000000038C1000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	38C1000
Size:	512000

Details

Name:	00000001.00000002.365624209.00000000001E4000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E4000
Size:	4096

Details

Name:	00000000.00000003.340131079.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	0000000C.00000003.451176427.0000000000C8F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8F000
Size:	65536

Details

Name:	0000000C.00000002.612376899.0000000005980000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5980000
Size:	65536

Details

Name:	00000010.00000002.609643943.000001D3FD49E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD49E000
Size:	40960

Details

Name:	00000001.00000003.358275945.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	00000001.00000003.358502276.000000000068B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68B000
Size:	8192

Details

Name:	00000000.00000002.375756669.00007FF5C68D4000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C68D4000
Size:	8192

Details

Name:	0000000C.00000002.601012514.0000000002930000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2930000
Size:	4096

Details

Name:	00000001.00000002.365402942.00000000001D0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D0000
Size:	4096

Details

Name:	00000000.00000002.375436645.00007FF5C65CC000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C65CC000
Size:	4096

Details

Name:	0000000D.00000003.495877041.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	40960

Details

Name:	0000000D.00000003.493479025.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000003.499544176.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	0000000D.00000003.504574305.00000000077D9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77D9000
Size:	40960

Details

Name:	00000000.00000003.368063602.000001B865C91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C91000
Size:	712704

Details

Name:	00000001.00000002.368478717.00000000009D0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000003.433393449.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	0000000C.00000002.612633790.0000000005C6E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6E000
Size:	8192

Details

Name:	00000003.00000003.373878469.00000000021C0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21C0000
Size:	65536

Details

Name:	00000000.00000003.369609910.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	139264

Details

Name:	0000000C.00000002.611233083.000000000515E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	515E000
Size:	8192

Details

Name:	0000000D.00000003.500656164.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000008.00000003.393799120.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	00000008.00000003.392613656.0000000001001000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1001000
Size:	16384

Details

Name:	0000000C.00000003.582759949.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	00000001.00000003.357676527.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	147456

Details

Name:	00000002.00000003.405172782.00000000050F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F0000
Size:	28672

Details

Name:	0000000D.00000003.496076219.0000000005AAC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAC000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.611349583.00000000054E0000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	54E0000
Size:	970752

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000008.00000003.394392377.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	0000000D.00000003.495751245.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	00000003.00000003.365649691.000000000068A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68A000
Size:	20480

Details

Name:	00000008.00000002.395793341.0000000000A70000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A70000
Size:	4096

Details

Name:	0000000D.00000002.602542542.0000000001350000.00000040.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	1350000
Size:	8192

Details

Name:	0000000D.00000002.615718704.00000000077F4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	77F4000
Size:	24576

Details

Name:	0000000D.00000003.501042572.0000000005ADC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADC000
Size:	65536

Details

Name:	00000008.00000003.393698437.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000C.00000003.487043196.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	0000000D.00000002.601182758.0000000000F7F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F7F000
Size:	4096

Details

Name:	00000001.00000003.357721406.000000001B150000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B150000
Size:	61440

Details

Name:	00000000.00000003.340925123.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	204800

Details

Name:	0000000D.00000002.615202363.00000000076B0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	76B0000
Size:	4096

Details

Name:	00000003.00000003.369313006.0000000000673000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	0000000C.00000002.611916378.0000000005610000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5610000
Size:	65536

Details

Name:	0000000D.00000003.493413174.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000002.600350846.0000000000CF6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CF6000
Size:	40960

Details

Name:	0000000C.00000002.612824405.0000000005FB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB0000
Size:	4096

Details

Name:	0000000C.00000003.516960849.000000000506E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	506E000
Size:	200704

Signature Hits	Behavior Group	Mitre Attack
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery

Details

Name:	00000003.00000002.609802657.000000001AE6E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AE6E000
Size:	8192

Details

Name:	00000000.00000003.337527959.000001B866DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866DB0000
Size:	4096

Details

Name:	00000001.00000002.368474408.00000000009CE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9CE000
Size:	8192

Details

Name:	00000001.00000003.357865311.000000001B090000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B090000
Size:	65536

Details

Name:	00000003.00000002.611042993.00007FFD0669A000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0669A000
Size:	4096

Details

Name:	00000003.00000003.373221343.00000000006A5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A5000
Size:	8192

Details

Name:	0000000B.00000002.600811704.0000022952120000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22952120000
Size:	4096

Details

Name:	0000000D.00000003.497297493.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	00000002.00000002.601003662.0000000000A90000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	A90000
Size:	20480

Details

Name:	0000000D.00000003.492268151.0000000005AAE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAE000
Size:	4096

Details

Name:	00000003.00000002.611103733.00007FFD066B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD066B0000
Size:	4096

Details

Name:	00000001.00000002.368608819.000000000238E000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	238E000
Size:	8192

Details

Name:	00000010.00000002.599642800.000000677B0FB000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B0FB000
Size:	20480

Details

Name:	0000000C.00000003.452701197.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000001.00000003.358345040.000000000068C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	4096

Details

Name:	0000000D.00000003.495674068.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	00000008.00000002.396022319.0000000000F53000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F53000
Size:	8192

Details

Name:	0000000D.00000003.501123187.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	12288

Details

Name:	00000000.00000003.340747597.000001B86602A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602A000
Size:	348160

Details

Name:	00000008.00000002.396119252.0000000000FB9000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	FB9000
Size:	352256

Details

Name:	0000000F.00000003.517967191.000000000094B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94B000
Size:	4096

Details

Name:	00000003.00000003.373753576.000000001B110000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B110000
Size:	65536

Details

Name:	00000000.00000003.340677635.000001B8665E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E3000
Size:	49152

Details

Name:	0000000D.00000003.500211674.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	4096

Details

Name:	00000003.00000002.611124181.00007FFD066BF000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066BF000
Size:	4096

Details

Name:	0000000D.00000003.494006262.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000003.580741361.00000000050BF000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BF000
Size:	65536

Details

Name:	00000002.00000002.600010016.000000000069A000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	69A000
Size:	4096

Details

Name:	0000000C.00000003.517260518.00000000050B3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B3000
Size:	114688

Details

Name:	00000000.00000003.368622047.000001B865C78000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C78000
Size:	16384

Details

Name:	00000000.00000003.341473888.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	204800

Details

Name:	0000000D.00000003.494158854.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000010.00000002.610201570.00007FF5CFC8B000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC8B000
Size:	4096

Details

Name:	00000008.00000003.393235587.00000000011B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11B0000
Size:	65536

Details

Name:	0000000D.00000003.495664177.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	0000000D.00000003.493422432.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000002.604211075.0000000002C90000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2C90000
Size:	45056

Details

Name:	00000000.00000002.375253196.00007FF5C61A9000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C61A9000
Size:	4096

Details

Name:	0000000D.00000003.511623149.0000000008178000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8178000
Size:	32768

Details

Name:	0000000C.00000002.611131950.00000000050F0000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	50F0000
Size:	20480

Details

Name:	00000002.00000003.405638570.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000000.00000003.331795237.000001B865B76000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B76000
Size:	16384

Details

Name:	00000002.00000003.490167476.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	0000000D.00000003.493833068.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000003.00000002.611184315.00007FFD0675A000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0675A000
Size:	8192

Details

Name:	00000000.00000002.373872355.000001B866570000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866570000
Size:	188416

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000002.00000003.379482329.00000000023A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23A0000
Size:	24576

Details

Name:	00000008.00000003.394331773.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	4096

Details

Name:	00000000.00000002.370725198.000001B863C20000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B863C20000
Size:	16384

Details

Name:	00000003.00000002.600251358.0000000000600000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	600000
Size:	45056

Details

Name:	00000001.00000002.367506500.00000000005B0000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5B0000
Size:	4096

Details

Name:	00000000.00000003.370469785.000001B865B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B9C000
Size:	4096

Details

Name:	00000000.00000002.371070776.000001B863D20000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B863D20000
Size:	69632

Details

Name:	00000000.00000002.375539251.00007FF5C676E000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C676E000
Size:	4096

Details

Name:	00000000.00000003.342616943.000001B866C12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C12000
Size:	4096

Details

Name:	0000000F.00000003.515689067.000000000094C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94C000
Size:	4096

Details

Name:	00000003.00000003.374792370.00000000006AA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AA000
Size:	4096

Details

Name:	00000008.00000002.396414198.0000000001340000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1340000
Size:	32768

Details

Name:	0000000D.00000003.501208445.00000000077A0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77A0000
Size:	53248

Details

Name:	00000003.00000002.611268381.00007FFD06792000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06792000
Size:	4096

Details

Name:	0000000D.00000003.500265711.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000003.00000002.600186902.00000000005D0000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5D0000
Size:	12288

Details

Name:	00000010.00000003.516319087.000001D3FD1A1000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1A1000
Size:	4096

Details

Name:	0000000D.00000003.501635359.000000000111F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	111F000
Size:	159744

Details

Name:	0000000C.00000002.600435696.0000000000F00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F00000
Size:	4096

Details

Name:	00000002.00000002.600163755.00000000006D7000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6D7000
Size:	4096

Details

Name:	00000010.00000002.609156625.000001D3FD340000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD340000
Size:	368640

Details

Name:	0000000C.00000002.599804583.0000000000CF5000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	CF5000
Size:	16384

Details

Name:	0000000B.00000002.608518670.00007FF57E644000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E644000
Size:	4096

Details

Name:	0000000D.00000002.602027519.000000000111B000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	111B000
Size:	188416

Details

Name:	00000000.00000003.369391338.000001B867332000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867332000
Size:	4096

Details

Name:	0000000D.00000003.492166741.0000000005AAA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAA000
Size:	4096

Details

Name:	0000000B.00000003.558130772.0000022951EAC000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EAC000
Size:	20480

Details

Name:	0000000C.00000002.611336317.00000000054DB000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54DB000
Size:	20480

Details

Name:	0000000C.00000003.436816453.0000000001170000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1170000
Size:	16384

Details

Name:	00000008.00000003.393062508.000000000103C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	103C000
Size:	12288

Details

Name:	00000002.00000002.612999547.000000000493B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	493B000
Size:	20480

Details

Name:	00000003.00000003.374716388.000000000069F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69F000
Size:	20480

Details

Name:	0000000D.00000003.496634960.0000000005ABE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABE000
Size:	4096

Details

Name:	00000010.00000003.516581474.000001D3FD250000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD250000
Size:	4096

Details

Name:	0000000D.00000003.507008743.00000000077E5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77E5000
Size:	24576

Details

Name:	00000000.00000003.340275567.000001B8661DB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661DB000
Size:	4096

Details

Name:	0000000D.00000003.494927116.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	28672

Details

Name:	00000000.00000002.372057742.000001B863EF0000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B863EF0000
Size:	32768

Details

Name:	0000000D.00000002.599969071.00000000009BA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9BA000
Size:	24576

Details

Name:	00000003.00000003.369189874.000000001AF84000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF84000
Size:	28672

Details

Name:	00000000.00000003.361122297.000001B863DC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DC4000
Size:	57344

Details

Name:	0000000D.00000003.491860763.00000000057E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57E0000
Size:	32768

Details

Name:	00000000.00000002.373525191.000001B865D3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D3E000
Size:	4096

Details

Name:	00000000.00000003.339756782.000001B8661E2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661E2000
Size:	110592

Details

Name:	0000000C.00000003.450611353.00000000050B3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B3000
Size:	8192

Details

Name:	00000002.00000002.612976987.00000000048FD000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	48FD000
Size:	12288

Details

Name:	0000000C.00000002.602026442.0000000002B47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B47000
Size:	4096

Details

Name:	00000000.00000003.342895192.000001B86606A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86606A000
Size:	253952

Details

Name:	00000008.00000002.397216533.00007FFD066DF000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066DF000
Size:	4096

Details

Name:	0000000D.00000003.495590747.0000000005AB0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	61440

Details

Name:	0000000D.00000003.499593171.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	0000000D.00000003.495409655.0000000005ABA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABA000
Size:	8192

Details

Name:	00000000.00000003.339285775.000001B8661FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661FD000
Size:	40960

Details

Name:	00000000.00000002.374483112.000001B866E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866E70000
Size:	8192

Details

Name:	0000000D.00000003.495003338.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	12288

Details

Name:	0000000C.00000003.449364968.0000000005097000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5097000
Size:	4096

Details

Name:	0000000C.00000003.452808163.0000000005C30000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	12288

Details

Name:	00000008.00000002.397211162.00007FFD066CC000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066CC000
Size:	4096

Details

Name:	00000002.00000002.602135229.000000000234E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	234E000
Size:	8192

Details

Name:	00000002.00000002.613513053.00000000050F0000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	50F0000
Size:	16384

Details

Name:	00000008.00000003.393198460.000000001B970000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B970000
Size:	4096

Details

Name:	00000003.00000003.369118937.00000000006A8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A8000
Size:	8192

Details

Name:	00000010.00000002.610188798.00007FF5CFC80000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC80000
Size:	4096

Details

Name:	00000008.00000002.396971277.000000001B7FE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B7FE000
Size:	8192

Details

Name:	00000000.00000003.369020335.000001B865B8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B8A000
Size:	4096

Details

Name:	00000002.00000003.405132914.00000000051B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51B0000
Size:	4096

Details

Name:	0000000E.00000002.514232988.00000000008AF000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8AF000
Size:	4096

Details

Name:	0000000D.00000003.493268734.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000003.499235820.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000000.00000003.339582755.000001B866586000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866586000
Size:	98304

Details

Name:	0000000D.00000003.500094276.0000000005AB9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB9000
Size:	20480

Details

Name:	00000008.00000003.392800867.0000000001017000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1017000
Size:	90112

Details

Name:	00000000.00000003.369378617.000001B867334000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867334000
Size:	4096

Details

Name:	0000000D.00000003.493249264.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000002.601169720.0000000000E79000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E79000
Size:	4096

Details

Name:	00000008.00000002.397059121.000000001B8A0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8A0000
Size:	36864

Details

Name:	0000000D.00000003.513170456.0000000000E77000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E77000
Size:	12288

Details

Name:	00000001.00000002.365670237.0000000000535000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	45056

Details

Name:	00000003.00000002.610922399.000000001B1AA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B1AA000
Size:	24576

Details

Name:	0000000F.00000003.517996362.000000000211B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211B000
Size:	4096

Details

Name:	00000001.00000002.367533477.00000000005E0000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5E0000
Size:	12288

Details

Name:	00000001.00000002.369260678.0000000012757000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12757000
Size:	16384

Details

Name:	00000008.00000003.394026388.000000001B950000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B950000
Size:	12288

Details

Name:	0000000D.00000002.614638241.0000000006DC0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6DC0000
Size:	24576

Details

Name:	00000003.00000002.600128535.0000000000560000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	560000
Size:	4096

Details

Name:	00000003.00000003.368451071.00000000021F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F0000
Size:	65536

Details

Name:	00000010.00000002.609947948.00007FF5CFABC000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFABC000
Size:	8192

Details

Name:	0000000D.00000003.493773228.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000002.615734296.0000000007809000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7809000
Size:	16384

Details

Name:	00000001.00000003.357658202.0000000000677000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	677000
Size:	90112

Details

Name:	00000001.00000002.369357325.000000001B030000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B030000
Size:	294912

Details

Name:	00000000.00000003.369732087.000001B863DF7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DF7000
Size:	32768

Details

Name:	0000000D.00000003.495315345.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	12288

Details

Name:	00000000.00000002.373360517.000001B865B74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B74000
Size:	20480

Details

Name:	0000000C.00000002.611870791.00000000055F8000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55F8000
Size:	4096

Details

Name:	0000000C.00000003.451313815.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	00000008.00000002.396366366.0000000001225000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1225000
Size:	8192

Details

Name:	0000000D.00000003.498827272.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	0000000D.00000003.500121316.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000010.00000002.610682230.00007FF5CFF04000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF04000
Size:	8192

Details

Name:	0000000C.00000003.452724271.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000008.00000002.397138024.000000001BBAE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAE000
Size:	8192

Details

Name:	00000000.00000002.376201031.00007FF5C69E4000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C69E4000
Size:	8192

Details

Name:	0000000D.00000002.612435883.000000000514B000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	514B000
Size:	86016

Details

Name:	0000000D.00000002.609412631.000000000312C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	312C000
Size:	12288

Details

Name:	0000000D.00000002.614618311.0000000006CCC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6CCC000
Size:	28672

Details

Name:	00000003.00000003.374804284.00000000006A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A4000
Size:	20480

Details

Name:	0000000C.00000002.612929678.000000000663E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	663E000
Size:	8192

Details

Name:	00000003.00000003.368043950.000000001B020000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B020000
Size:	61440

Details

Name:	0000000B.00000003.558174554.00000229528F0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229528F0000
Size:	4096

Details

Name:	0000000D.00000003.498913894.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	16384

Details

Name:	00000001.00000002.369744256.00007FFD067C2000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD067C2000
Size:	28672

Details

Name:	00000000.00000003.339889096.000001B8661CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661CE000
Size:	249856

Details

Name:	00000000.00000002.375850572.00007FF5C6919000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6919000
Size:	16384

Details

Name:	0000000C.00000002.601887838.0000000002B25000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B25000
Size:	8192

Details

Name:	00000003.00000003.368989897.0000000000676000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	676000
Size:	12288

Details

Name:	0000000D.00000003.497554573.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	0000000D.00000002.601242132.0000000000FD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FD0000
Size:	4096

Details

Name:	0000000C.00000002.610561427.0000000004FD0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FD0000
Size:	405504

Details

Name:	00000000.00000000.330834391.00007FF5C6A37000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6A37000
Size:	16384

Details

Name:	0000000B.00000002.600470459.0000022951DD0000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22951DD0000
Size:	28672

Details

Name:	00000002.00000003.433412553.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000D.00000003.492530295.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000002.612251687.000000000511E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	511E000
Size:	8192

Details

Name:	0000000D.00000003.502017335.00000000077A1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77A1000
Size:	159744

Details

Name:	0000000C.00000002.600614529.0000000000F57000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F57000
Size:	8192

Details

Name:	00000010.00000002.610108950.00007FF5CFC39000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC39000
Size:	4096

Details

Name:	0000000D.00000003.494301769.0000000005ABD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABD000
Size:	4096

Details

Name:	00000010.00000002.610430268.00007FF5CFE24000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE24000
Size:	4096

Details

Name:	0000000D.00000003.493260557.0000000005AB2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB2000
Size:	4096

Details

Name:	0000000D.00000003.496406563.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	36864

Details

Name:	00000001.00000003.357637408.00000000006C7000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C7000
Size:	16384

Details

Name:	00000001.00000002.369252738.0000000012755000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12755000
Size:	4096

Details

Name:	0000000D.00000003.492567959.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000003.451349006.0000000000C8F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8F000
Size:	65536

Details

Name:	00000000.00000003.369580987.000001B863D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D46000
Size:	8192

Details

Name:	0000000D.00000003.500796501.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	00000010.00000002.610093919.00007FF5CFC32000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC32000
Size:	20480

Details

Name:	0000000B.00000003.558080896.0000022951EAC000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EAC000
Size:	40960

Details

Name:	00000003.00000003.373677861.000000001B178000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B178000
Size:	32768

Details

Name:	00000010.00000003.520620394.000001D3FD180000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD180000
Size:	4096

Details

Name:	00000000.00000003.370274647.000001B865F92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F92000
Size:	24576

Details

Name:	0000000C.00000002.612095063.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	0000000D.00000002.604273172.0000000002CA0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2CA0000
Size:	20480

Details

Name:	00000000.00000003.331738072.000001B865B7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B7A000
Size:	24576

Details

Name:	0000000C.00000000.429724770.00000000006E0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E0000
Size:	4096

Details

Name:	0000000C.00000003.580657138.0000000000C9B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9B000
Size:	4096

Details

Name:	00000000.00000003.340976590.000001B865FB7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FB7000
Size:	401408

Details

Name:	00000010.00000002.610281186.00007FF5CFCF3000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFCF3000
Size:	4096

Details

Name:	00000000.00000003.339220137.000001B865F92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F92000
Size:	503808

Details

Name:	00000002.00000002.599967739.0000000000690000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	690000
Size:	4096

Details

Name:	00000010.00000002.604102396.000001D3FCC70000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FCC70000
Size:	65536

Details

Name:	0000000D.00000002.616327884.00000000082BE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82BE000
Size:	8192

Details

Name:	0000000C.00000003.449321033.0000000000C24000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C24000
Size:	249856

Details

Name:	0000000C.00000002.611260336.000000000525E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	525E000
Size:	8192

Details

Name:	0000000F.00000003.517050171.00000000025F1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25F1000
Size:	4096

Details

Name:	0000000B.00000003.543166173.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	28672

Details

Name:	00000001.00000003.358129148.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	102400

Details

Name:	00000003.00000003.373950380.00000000006A0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	20480

Details

Name:	0000000C.00000002.612493328.00000000059F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59F0000
Size:	49152

Details

Name:	0000000D.00000003.500481570.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	00000000.00000002.371176789.000001B863D32000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B863D32000
Size:	77824

Details

Name:	00000000.00000003.368735750.000001B865C8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C8A000
Size:	28672

Details

Name:	0000000D.00000003.492402144.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000010.00000002.609035264.000001D3FD287000.00000008.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page write copy
Base address:	1D3FD287000
Size:	4096

Details

Name:	00000003.00000002.599578852.0000000000420000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	420000
Size:	806912

Details

Name:	0000000D.00000003.493669963.0000000005AB4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB4000
Size:	4096

Details

Name:	00000008.00000003.394274897.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000F.00000003.516829245.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000001.00000003.358294330.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	65536

Details

Name:	0000000D.00000003.500826888.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	0000000C.00000003.517212482.00000000050A2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50A2000
Size:	65536

Details

Name:	00000003.00000002.600211419.00000000005E0000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5E0000
Size:	4096

Details

Name:	00000000.00000002.374296880.000001B866DA0000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866DA0000
Size:	12288

Details

Name:	0000000B.00000002.608045256.00007FF57DCF7000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DCF7000
Size:	16384

Details

Name:	00000008.00000003.393510464.000000001B910000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B910000
Size:	65536

Details

Name:	00000000.00000003.370477823.000001B865BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB2000
Size:	4096

Details

Name:	0000000D.00000003.498090949.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	0000000B.00000002.608463434.00007FF57E5DD000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E5DD000
Size:	20480

Details

Name:	0000000B.00000003.558092397.0000022951EB7000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB7000
Size:	16384

Details

Name:	00000002.00000003.379445689.00000000023A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23A0000
Size:	45056

Details

Name:	00000003.00000003.365903946.0000000000673000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	00000000.00000003.331807577.000001B865B81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B81000
Size:	65536

Details

Name:	00000008.00000002.397243307.00007FFD06772000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06772000
Size:	4096

Details

Name:	00000002.00000002.602379468.00000000023A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23A0000
Size:	65536

Details

Name:	00000008.00000003.392922019.0000000001038000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1038000
Size:	12288

Details

Name:	00000000.00000003.340807011.000001B8665F6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665F6000
Size:	36864

Details

Name:	0000000D.00000003.495559319.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	114688

Details

Name:	00000010.00000002.610333789.00007FF5CFD88000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFD88000
Size:	4096

Details

Name:	00000000.00000002.373866003.000001B86620A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86620A000
Size:	4096

Details

Name:	0000000D.00000003.504175577.0000000007D90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D90000
Size:	8192

Details

Name:	00000010.00000002.610780734.00007FF5CFF42000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFF42000
Size:	36864

Details

Name:	0000000D.00000003.492623895.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000000.00000003.340718092.000001B865FA3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA3000
Size:	16384

Details

Name:	00000000.00000003.339155691.000001B866171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866171000
Size:	630784

Details

Name:	0000000D.00000003.505396066.00000000077D4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77D4000
Size:	24576

Details

Name:	00000008.00000003.394219887.000000001B800000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B800000
Size:	65536

Details

Name:	0000000F.00000002.518626993.000000000069F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	69F000
Size:	4096

Details

Name:	00000000.00000003.332794035.000001B86644E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86644E000
Size:	4096

Details

Name:	0000000B.00000002.599433845.0000006F81CF9000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F81CF9000
Size:	28672

Details

Name:	00000000.00000002.376175075.00007FF5C69E1000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C69E1000
Size:	8192

Details

Name:	00000000.00000003.369723319.000001B863DF2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DF2000
Size:	4096

Details

Name:	00000000.00000002.375554848.00007FF5C6770000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6770000
Size:	4096

Details

Name:	00000001.00000003.357948342.000000000068F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68F000
Size:	8192

Details

Name:	00000003.00000002.600397519.0000000000639000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	639000
Size:	16384

Details

Name:	00000000.00000002.371418479.000001B863D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D53000
Size:	45056

Details

Name:	0000000D.00000003.494249441.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000002.00000003.502899741.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	0000000D.00000003.493708651.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000003.494516623.0000000005ACE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACE000
Size:	4096

Details

Name:	00000002.00000003.496159186.0000000005980000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5980000
Size:	2621440

Details

Name:	0000000C.00000003.443049426.00000000050F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F0000
Size:	20480

Details

Name:	0000000B.00000003.426646019.0000022951E7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7E000
Size:	4096

Details

Name:	0000000D.00000003.504512384.00000000077CC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77CC000
Size:	94208

Details

Name:	0000000D.00000003.494884740.0000000005ABC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABC000
Size:	4096

Details

Name:	0000000B.00000002.608621997.00007FF57E66A000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E66A000
Size:	12288

Details

Name:	0000000C.00000003.582618158.0000000000C54000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	16384

Details

Name:	00000000.00000003.363152368.000001B863D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D5E000
Size:	417792

Details

Name:	00000000.00000002.373824038.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	36864

Details

Name:	00000000.00000003.370395203.000001B865B7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B7E000
Size:	4096

Details

Name:	0000000D.00000003.499159298.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	110592

Details

Name:	0000000C.00000003.451476053.0000000000C8F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8F000
Size:	65536

Details

Name:	00000010.00000003.516379101.000001D3FD1B0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1B0000
Size:	8192

Details

Name:	00000010.00000002.610580236.00007FF5CFE8D000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE8D000
Size:	20480

Details

Name:	0000000D.00000003.493968145.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	0000000D.00000002.601192405.0000000000FBE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FBE000
Size:	8192

Details

Name:	0000000D.00000002.601406259.0000000001012000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1012000
Size:	8192

Details

Name:	0000000D.00000003.493276632.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.499278925.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	32768

Details

Name:	00000002.00000002.599813942.0000000000662000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	662000
Size:	8192

Details

Name:	00000000.00000002.370771410.000001B863CA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863CA0000
Size:	8192

Details

Name:	0000000D.00000003.493559907.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000D.00000003.500998548.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	61440

Details

Name:	00000002.00000002.613632376.00000000052DD000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52DD000
Size:	12288

Details

Name:	00000003.00000003.374458586.000000000069C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69C000
Size:	12288

Details

Name:	00000001.00000003.358213757.000000001B090000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B090000
Size:	45056

Details

Name:	0000000E.00000002.514224357.00000000006CB000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6CB000
Size:	16384

Details

Name:	0000000C.00000002.601200241.0000000002AE0000.00000040.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2AE0000
Size:	4096

Details

Name:	00000001.00000003.358250051.000000001B030000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B030000
Size:	65536

Details

Name:	00000000.00000003.370408415.000001B865B80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B80000
Size:	20480

Details

Name:	00000001.00000003.358286783.000000000068C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	4096

Details

Name:	00000000.00000003.367888879.000001B865F4C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F4C000
Size:	8192

Details

Name:	00000010.00000002.602870924.000001D3FCB40000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FCB40000
Size:	4096

Details

Name:	00000000.00000003.369064856.000001B865BB4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB4000
Size:	16384

Details

Name:	00000008.00000003.393933846.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	00000001.00000002.368484105.0000000000A00000.00000002.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	A00000
Size:	12288

Details

Name:	0000000C.00000003.452674537.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	12288

Details

Name:	00000003.00000003.367713209.00000000006CF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CF000
Size:	24576

Details

Name:	00000000.00000002.375312074.00007FF5C6247000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6247000
Size:	4096

Details

Name:	00000000.00000003.370103562.000001B8661FF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661FF000
Size:	32768

Details

Name:	00000000.00000003.370196285.000001B865F9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9B000
Size:	12288

Details

Name:	00000002.00000002.600450501.000000000076B000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	76B000
Size:	172032

Details

Name:	00000001.00000003.358272577.000000000068F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68F000
Size:	4096

Details

Name:	0000000D.00000003.495254035.0000000005AB6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB6000
Size:	12288

Details

Name:	0000000B.00000002.607713477.0000022952B90000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22952B90000
Size:	65536

Details

Name:	00000000.00000003.365354079.000001B8665F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665F2000
Size:	53248

Details

Name:	00000000.00000003.339987588.000001B866171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866171000
Size:	32768

Details

Name:	0000000C.00000002.602282466.0000000002B6B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B6B000
Size:	4096

Details

Name:	00000010.00000002.609854138.00007FF5CF71A000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF71A000
Size:	4096

Details

Name:	00000003.00000002.609996053.000000001AEC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC0000
Size:	65536

Details

Name:	0000000D.00000003.495838585.0000000005AAB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AAB000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.505352114.00000000077EC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77EC000
Size:	32768

Details

Name:	00000000.00000002.375939070.00007FF5C6943000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6943000
Size:	24576

Details

Name:	00000003.00000002.610110554.000000001AF10000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1AF10000
Size:	4096

Details

Name:	00000010.00000002.601391836.000001D3FBC70000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC70000
Size:	4096

Details

Name:	00000010.00000002.601785818.000001D3FBC7A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC7A000
Size:	12288

Details

Name:	0000000D.00000003.498056767.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	00000000.00000003.370365253.000001B865C7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C7F000
Size:	16384

Details

Name:	0000000F.00000003.516178482.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000D.00000003.497393564.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	0000000C.00000003.450546011.00000000050B5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B5000
Size:	53248

Details

Name:	00000003.00000002.609597815.0000000012597000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12597000
Size:	20480

Details

Name:	0000000D.00000003.499565880.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000000.00000003.331763093.000001B865BAE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BAE000
Size:	36864

Details

Name:	00000002.00000003.427524313.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000000.00000003.369396792.000001B867331000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B867331000
Size:	4096

Details

Name:	00000002.00000002.613181582.0000000004B3E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B3E000
Size:	8192

Details

Name:	0000000D.00000003.493125621.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000001.00000003.357672220.000000000068F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68F000
Size:	8192

Details

Name:	00000000.00000003.332715696.000001B86640D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86640D000
Size:	270336

Details

Name:	0000000D.00000003.493570381.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000000.00000002.376264361.00007FF5C69F4000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C69F4000
Size:	8192

Details

Name:	0000000D.00000003.500706626.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000000.00000002.371536684.000001B863DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DE7000
Size:	32768

Details

Name:	00000003.00000002.611214758.00007FFD06765000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD06765000
Size:	4096

Details

Name:	00000000.00000003.361083011.000001B8661F3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661F3000
Size:	12288

Details

Name:	00000008.00000003.393526080.000000001B900000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B900000
Size:	65536

Details

Name:	00000010.00000003.516854221.000001D3FD2E0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD2E0000
Size:	4096

Details

Name:	00000000.00000003.339769060.000001B8661FF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661FF000
Size:	32768

Details

Name:	00000002.00000002.613917327.000000000577E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	577E000
Size:	8192

Details

Name:	0000000B.00000003.543205330.0000022951EAB000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EAB000
Size:	24576

Details

Name:	0000000C.00000002.599612957.0000000000C59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	45056

Details

Name:	0000000D.00000003.493492613.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000003.499912960.0000000005AEA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEA000
Size:	4096

Details

Name:	00000003.00000003.369103104.00000000006C0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C0000
Size:	8192

Details

Name:	0000000F.00000003.517815003.000000000211B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211B000
Size:	4096

Details

Name:	00000001.00000002.369715594.00007FFD0675A000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0675A000
Size:	4096

Details

Name:	00000003.00000002.602143887.0000000002210000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2210000
Size:	20480

Details

Name:	00000008.00000002.396205158.0000000001190000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1190000
Size:	12288

Details

Name:	00000010.00000002.610310163.00007FF5CFD17000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFD17000
Size:	4096

Details

Name:	0000000F.00000002.518861486.0000000002131000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	4096

Details

Name:	0000000D.00000003.493193807.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000010.00000002.610603947.00007FF5CFE99000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE99000
Size:	16384

Details

Name:	00000010.00000002.610163799.00007FF5CFC50000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFC50000
Size:	8192

Details

Name:	00000000.00000002.375267693.00007FF5C620A000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C620A000
Size:	4096

Details

Name:	0000000D.00000002.600078734.0000000000B8B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B8B000
Size:	4096

Details

Name:	0000000D.00000003.504971719.0000000008270000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8270000
Size:	20480

Details

Name:	00000000.00000002.370602392.0000001D399FE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D399FE000
Size:	8192

Details

Name:	00000008.00000003.392772750.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	00000008.00000003.393312484.000000001B9D0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9D0000
Size:	65536

Details

Name:	0000000D.00000002.612853496.000000000569E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	569E000
Size:	8192

Details

Name:	00000008.00000002.396029491.0000000000F56000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F56000
Size:	4096

Details

Name:	0000000B.00000002.599507448.0000022951C60000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951C60000
Size:	4096

Details

Name:	0000000D.00000003.493699258.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000000.00000002.375467608.00007FF5C660A000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C660A000
Size:	12288

Details

Name:	00000001.00000002.367554341.00000000005E5000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5E5000
Size:	8192

Details

Name:	0000000D.00000003.496201073.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	00000002.00000002.599478573.00000000004F9000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F9000
Size:	28672

Details

Name:	00000000.00000003.361808912.000001B863E03000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863E03000
Size:	90112

Details

Name:	00000000.00000003.339823300.000001B8665AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665AF000
Size:	40960

Details

Name:	00000002.00000002.613897548.00000000056A8000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	56A8000
Size:	8192

Details

Name:	00000002.00000003.502625113.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	00000000.00000002.375405570.00007FF5C656F000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C656F000
Size:	8192

Details

Name:	0000000C.00000002.611002544.00000000050C0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50C0000
Size:	61440

Details

Name:	00000010.00000003.516336338.000001D3FD1A4000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD1A4000
Size:	4096

Details

Name:	00000002.00000002.602638956.000000000256E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256E000
Size:	8192

Details

Name:	00000001.00000002.369709594.00007FFD0674A000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0674A000
Size:	8192

Details

Name:	00000003.00000003.374739992.0000000000694000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	4096

Details

Name:	00000000.00000003.343169916.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	00000003.00000003.384421743.00000000006B5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B5000
Size:	20480

Details

Name:	00000010.00000002.610396424.00007FF5CFE14000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFE14000
Size:	8192

Details

Name:	00000000.00000003.339486778.000001B8661D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661D5000
Size:	163840

Details

Name:	00000008.00000003.392629459.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	61440

Details

Name:	00000000.00000002.375723604.00007FF5C6871000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6871000
Size:	16384

Details

Name:	0000000D.00000002.616073437.0000000007D80000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7D80000
Size:	36864

Details

Name:	0000000F.00000002.518894467.00000000022B0000.00000002.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	22B0000
Size:	3371008

Details

Name:	00000000.00000002.376413312.00007FF5C6A32000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6A32000
Size:	36864

Details

Name:	00000000.00000003.341582297.000001B865D3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865D3F000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
Yara signature match	System Summary

Details

Name:	0000000D.00000003.496013362.0000000005AC7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC7000
Size:	4096

Details

Name:	00000002.00000002.599926562.0000000000687000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	687000
Size:	4096

Details

Name:	00000000.00000003.369521778.000001B867130000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B867130000
Size:	4096

Details

Name:	00000001.00000002.368569982.0000000000ACA000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ACA000
Size:	24576

Details

Name:	0000000D.00000003.506974160.00000000077FA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	77FA000
Size:	16384

Details

Name:	00000003.00000002.602234489.0000000002250000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2250000
Size:	3371008

Details

Name:	0000000C.00000002.600396837.0000000000EF0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EF0000
Size:	40960

Details

Name:	00000008.00000003.392948705.0000000001044000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1044000
Size:	20480

Details

Name:	0000000F.00000003.517473450.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	0000000D.00000002.601115333.0000000000E60000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E60000
Size:	4096

Details

Name:	0000000F.00000003.517910387.000000000211E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211E000
Size:	36864

Details

Name:	00000001.00000002.365919500.0000000000590000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	590000
Size:	4096

Details

Name:	00000008.00000003.394116502.000000001B920000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B920000
Size:	65536

Details

Name:	0000000C.00000003.516865897.0000000000C9C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9C000
Size:	4096

Details

Name:	0000000D.00000002.614913162.00000000072FE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	72FE000
Size:	8192

Details

Name:	00000000.00000002.373688847.000001B86601C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86601C000
Size:	69632

Details

Name:	00000002.00000003.461578375.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000C.00000003.450562111.00000000050C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C9000
Size:	24576

Details

Name:	0000000B.00000002.608275143.00007FF57E4D8000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E4D8000
Size:	4096

Details

Name:	0000000D.00000003.494270722.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.604430971.0000000002CC0000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2CC0000
Size:	24576

Details

Name:	0000000C.00000003.582665075.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	188416

Details

Name:	00000000.00000003.341411819.000001B865F80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F80000
Size:	20480

Details

Name:	00000000.00000003.339712718.000001B866BB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866BB3000
Size:	356352

Details

Name:	0000000F.00000003.517410631.000000000210D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	210D000
Size:	49152

Details

Name:	00000003.00000002.602200803.0000000002240000.00000040.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2240000
Size:	8192

Details

Name:	00000003.00000003.373353610.0000000000695000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	695000
Size:	16384

Details

Name:	00000000.00000003.331728125.000001B865BB7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB7000
Size:	20480

Details

Name:	0000000C.00000002.600780900.0000000001190000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1190000
Size:	36864

Details

Name:	00000002.00000003.373465171.00000000023A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23A0000
Size:	28672

Details

Name:	00000002.00000003.413920100.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000C.00000002.612763961.0000000005E2D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E2D000
Size:	12288

Details

Name:	00000002.00000002.602159127.0000000002350000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2350000
Size:	20480

Details

Name:	0000000D.00000003.496434801.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	32768

Details

Name:	0000000D.00000003.493685198.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000008.00000003.393587779.0000000001009000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	8192

Details

Name:	00000001.00000002.368553110.0000000000AC0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AC0000
Size:	4096

Details

Name:	00000003.00000003.369302309.00000000021F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F0000
Size:	65536

Details

Name:	0000000D.00000003.499611985.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	110592

Details

Name:	0000000D.00000003.499782345.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	28672

Details

Name:	00000010.00000002.609620401.000001D3FD487000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD487000
Size:	90112

Details

Name:	0000000D.00000002.600163367.0000000000B97000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B97000
Size:	4096

Details

Name:	00000002.00000003.449746130.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000010.00000002.609286930.000001D3FD3E0000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD3E0000
Size:	73728

Details

Name:	0000000C.00000003.486858028.0000000005FB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB0000
Size:	45056

Details

Name:	00000008.00000002.397232291.00007FFD06714000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06714000
Size:	4096

Details

Name:	0000000D.00000002.601101225.0000000000E50000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	E50000
Size:	4096

Details

Name:	0000000D.00000003.504939796.0000000008270000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8270000
Size:	65536

Details

Name:	00000001.00000003.358140608.0000000000696000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	696000
Size:	94208

Details

Name:	0000000D.00000002.615185950.000000000768D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	768D000
Size:	12288

Details

Name:	00000002.00000003.413950432.0000000006280000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6280000
Size:	8192

Details

Name:	0000000D.00000002.601148801.0000000000E75000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E75000
Size:	8192

Details

Name:	0000000D.00000003.494148839.0000000005ACC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACC000
Size:	8192

Details

Name:	00000000.00000003.342862287.000001B86602D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602D000
Size:	126976

Details

Name:	0000000C.00000002.611157355.0000000005100000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	5100000
Size:	65536

Details

Name:	00000000.00000002.375397262.00007FF5C64DC000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C64DC000
Size:	4096

Details

Name:	0000000D.00000003.494559888.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	8192

Details

Name:	0000000B.00000003.426421854.0000022951E7F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E7F000
Size:	53248

Details

Name:	00000003.00000003.373925029.000000000068E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68E000
Size:	12288

Details

Name:	0000000D.00000002.613434837.0000000005985000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5985000
Size:	40960

Details

Name:	00000010.00000002.600705159.000001D3FBC13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC13000
Size:	86016

Details

Name:	0000000D.00000003.493019447.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000008.00000002.397249180.00007FFD0677A000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD0677A000
Size:	8192

Details

Name:	00000001.00000002.368497202.0000000000A30000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	65536

Details

Name:	0000000D.00000003.500817870.0000000005AE7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE7000
Size:	4096

Details

Name:	0000000C.00000003.548798776.00000000057C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C9000
Size:	323584

Details

Name:	00000003.00000003.368138370.000000001B017000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B017000
Size:	36864

Details

Name:	00000002.00000003.490183564.0000000005D40000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	2621440

Details

Name:	00000003.00000003.373434601.00000000006D6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D6000
Size:	4096

Details

Name:	0000000D.00000003.492640409.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000003.00000002.611019314.00007FF4372F0000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FF4372F0000
Size:	4096

Details

Name:	00000008.00000003.393486539.00000000011C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C0000
Size:	65536

Details

Name:	00000008.00000003.392735136.000000000104D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104D000
Size:	24576

Details

Name:	00000008.00000002.396188671.000000000116E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	116E000
Size:	8192

Details

Name:	00000010.00000002.609346445.000001D3FD417000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD417000
Size:	28672

Details

Name:	00000000.00000003.332607472.000001B8664D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8664D4000
Size:	565248

Details

Name:	00000010.00000002.610640109.00007FF5CFEF4000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFEF4000
Size:	8192

Details

Name:	0000000D.00000003.504708720.000000000115F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	115F000
Size:	16384

Details

Name:	00000008.00000003.394038511.000000001B954000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B954000
Size:	28672

Details

Name:	00000000.00000003.361859782.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	139264

Details

Name:	0000000D.00000002.612960525.00000000057E0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	57E0000
Size:	733184

Details

Name:	0000000C.00000002.602304917.0000000002B75000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B75000
Size:	8192

Details

Name:	0000000D.00000003.501072557.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	12288

Details

Name:	00000008.00000003.392965998.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	0000000C.00000003.451919901.00000000059E0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59E0000
Size:	8192

Details

Name:	00000001.00000002.367921609.000000000066D000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	66D000
Size:	28672

Details

Name:	00000000.00000003.339402600.000001B865FAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FAF000
Size:	20480

Details

Name:	00000000.00000002.376064938.00007FF5C697D000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C697D000
Size:	20480

Details

Name:	00000008.00000002.396456921.0000000002BE0000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2BE0000
Size:	3371008

Details

Name:	0000000D.00000003.493081550.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000000.00000002.373584571.000001B865F74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F74000
Size:	12288

Details

Name:	00000010.00000002.609960350.00007FF5CFAC9000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFAC9000
Size:	8192

Details

Name:	0000000D.00000003.492722391.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000002.599565053.0000000000BD4000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BD4000
Size:	180224

Details

Name:	00000010.00000002.608953637.000001D3FD253000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD253000
Size:	4096

Details

Name:	0000000D.00000003.496737872.0000000005AC1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	4096

Details

Name:	0000000D.00000003.493548090.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000C.00000003.550880908.0000000000C66000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	0000000C.00000003.451123769.0000000000C32000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C32000
Size:	155648

Details

Name:	0000000C.00000002.612455534.00000000059D0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	28672

Details

Name:	00000000.00000003.336084913.000001B865C77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C77000
Size:	20480

Details

Name:	0000000B.00000002.607623031.0000022952960000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22952960000
Size:	53248

Details

Name:	00000002.00000002.599416579.00000000002BD000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BD000
Size:	8192

Details

Name:	00000008.00000002.396272383.00000000011E0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11E0000
Size:	4096

Details

Name:	0000000D.00000002.614900535.00000000071FD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	71FD000
Size:	12288

Details

Name:	0000000D.00000002.612145815.00000000040B7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	40B7000
Size:	122880

Details

Name:	00000001.00000003.357799623.000000001B0B0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0B0000
Size:	65536

Details

Name:	0000000D.00000003.494916720.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	0000000B.00000002.608113032.00007FF57DE0B000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DE0B000
Size:	4096

Details

Name:	00000002.00000002.613702550.00000000054EE000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54EE000
Size:	8192

Details

Name:	00000001.00000003.358095872.00000000006B5000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B5000
Size:	4096

Details

Name:	0000000D.00000003.501460153.000000000111F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	111F000
Size:	155648

Details

Name:	00000010.00000002.602739453.000001D3FC502000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FC502000
Size:	32768

Details

Name:	00000003.00000003.374294083.000000000069C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69C000
Size:	8192

Details

Name:	00000001.00000003.357715979.000000001B160000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B160000
Size:	28672

Details

Name:	0000000D.00000003.494193494.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000002.616200946.0000000008100000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8100000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara signature match	System Summary

Details

Name:	0000000D.00000003.496030108.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	45056

Details

Name:	00000000.00000003.363089891.000001B865F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9F000
Size:	4096

Details

Name:	00000003.00000003.373328781.00000000006D7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D7000
Size:	16384

Details

Name:	0000000E.00000002.514182225.0000000000690000.00000002.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	690000
Size:	16384

Details

Name:	0000000C.00000003.450591027.000000000509C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509C000
Size:	8192

Details

Name:	00000008.00000003.392753239.0000000000FF2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	73728

Details

Name:	00000002.00000003.427503367.0000000006172000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6172000
Size:	4096

Details

Name:	0000000C.00000002.612906531.00000000065FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	65FE000
Size:	8192

Details

Name:	00000008.00000002.397044392.000000001B890000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B890000
Size:	65536

Details

Name:	00000010.00000002.609657311.000001D3FD4AC000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD4AC000
Size:	12288

Details

Name:	00000010.00000002.610244829.00007FF5CFCE7000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFCE7000
Size:	8192

Details

Name:	00000001.00000002.368521323.0000000000A54000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A54000
Size:	20480

Details

Name:	00000003.00000003.373191308.000000000068D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68D000
Size:	8192

Details

Name:	00000002.00000002.613667317.00000000053A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53A0000
Size:	4096

Details

Name:	0000000D.00000003.499933271.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	36864

Details

Name:	00000002.00000003.427301201.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000000.00000003.342094538.000001B86618F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618F000
Size:	98304

Details

Name:	00000000.00000003.332167855.000001B866861000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866861000
Size:	663552

Details

Name:	00000003.00000003.369241402.000000001AF70000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AF70000
Size:	45056

Details

Name:	0000000D.00000002.615215139.00000000076C0000.00000002.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	76C0000
Size:	876544

Details

Name:	0000000B.00000003.426668669.0000022951EB5000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB5000
Size:	4096

Details

Name:	0000000B.00000002.608565537.00007FF57E64D000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E64D000
Size:	12288

Details

Name:	00000003.00000002.611009679.00007FF4372E0000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FF4372E0000
Size:	4096

Details

Name:	0000000B.00000002.608335993.00007FF57E5B6000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E5B6000
Size:	12288

Details

Name:	0000000D.00000000.490810739.0000000000922000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	922000
Size:	16384

Details

Name:	0000000D.00000002.615784418.00000000079DD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	79DD000
Size:	12288

Details

Name:	0000000D.00000003.491371728.0000000002CA0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CA0000
Size:	12288

Details

Name:	00000010.00000002.609886428.00007FF5CF771000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CF771000
Size:	8192

Details

Name:	00000008.00000003.393368758.000000001B990000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B990000
Size:	65536

Details

Name:	00000008.00000002.396256210.00000000011DA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	24576

Details

Name:	00000010.00000002.601115438.000001D3FBC58000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FBC58000
Size:	69632

Details

Name:	00000000.00000003.339942431.000001B866192000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866192000
Size:	86016

Details

Name:	0000000E.00000002.514207053.00000000006B8000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6B8000
Size:	73728

Details

Name:	00000001.00000002.368516862.0000000000A50000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A50000
Size:	4096

Details

Name:	0000000D.00000003.500421185.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	12288

Details

Name:	00000001.00000003.357752752.000000001B147000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B147000
Size:	36864

Details

Name:	0000000C.00000003.453000291.0000000000C86000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C86000
Size:	69632

Details

Name:	00000003.00000003.367819234.00000000006DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6DF000
Size:	28672

Details

Name:	00000002.00000002.613266149.0000000004E00000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	4E00000
Size:	16384

Details

Name:	00000002.00000002.602199463.0000000002357000.00000002.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2357000
Size:	12288

Details

Name:	0000000C.00000003.452648154.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	16384

Details

Name:	0000000D.00000003.498228503.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	24576

Details

Name:	0000000E.00000002.513979949.0000000000382000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	382000
Size:	8192

Details

Name:	00000000.00000003.369145824.000001B865BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB2000
Size:	4096

Details

Name:	00000003.00000003.373345219.0000000000693000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	693000
Size:	4096

Details

Name:	0000000F.00000003.517937901.000000000212D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	212D000
Size:	8192

Details

Name:	0000000C.00000002.599731198.0000000000C9E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	4096

Details

Name:	0000000C.00000003.451936160.00000000059E0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59E0000
Size:	16384

Details

Name:	00000000.00000003.341301591.000001B865F9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9B000
Size:	12288

Details

Name:	00000008.00000002.397081164.000000001B8D2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8D2000
Size:	4096

Details

Name:	0000000D.00000003.495302953.0000000005AD7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD7000
Size:	4096

Details

Name:	00000002.00000002.599867172.0000000000670000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	670000
Size:	8192

Details

Name:	0000000D.00000003.492825567.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	0000000C.00000003.452767911.0000000005A10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	16384

Details

Name:	00000001.00000003.358031161.000000000068F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68F000
Size:	4096

Details

Name:	0000000C.00000002.599448978.0000000000B80000.00000002.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	B80000
Size:	16384

Details

Name:	0000000D.00000003.495695839.0000000005AA3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA3000
Size:	114688

Details

Name:	00000000.00000002.375804136.00007FF5C68F8000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C68F8000
Size:	4096

Details

Name:	00000000.00000002.375837777.00007FF5C6914000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6914000
Size:	4096

Details

Name:	00000003.00000003.373823974.000000001AED0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AED0000
Size:	65536

Details

Name:	00000003.00000003.367584790.000000000068C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	4096

Details

Name:	00000002.00000002.613136191.00000000049E0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	49E0000
Size:	4096

Details

Name:	00000000.00000003.331446752.000001B865BAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BAF000
Size:	102400

Details

Name:	00000000.00000003.339995692.000001B8661D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661D8000
Size:	40960

Details

Name:	00000002.00000002.613090122.0000000004993000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4993000
Size:	8192

Details

Name:	00000000.00000003.370220882.000001B865FA3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA3000
Size:	8192

Details

Name:	00000000.00000002.374402781.000001B866E60000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B866E60000
Size:	16384

Details

Name:	00000000.00000002.373859332.000001B8661FE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661FE000
Size:	4096

Details

Name:	00000000.00000002.373645563.000001B865F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9F000
Size:	4096

Details

Name:	00000002.00000003.461543791.00000000053EA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53EA000
Size:	8192

Details

Name:	00000000.00000003.363436779.000001B8661C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8661C6000
Size:	139264

Details

Name:	0000000D.00000003.498505562.0000000005ADA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	16384

Details

Name:	00000008.00000003.393380983.000000001B800000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B800000
Size:	65536

Details

Name:	0000000C.00000002.602380891.0000000002B7C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B7C000
Size:	8192

Details

Name:	00000008.00000003.392766526.0000000001005000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	0000000C.00000002.599295477.00000000006EE000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EE000
Size:	4096

Details

Name:	00000008.00000003.393185818.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	00000003.00000003.373930730.0000000000692000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	692000
Size:	4096

Details

Name:	00000002.00000002.602673948.0000000002570000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2570000
Size:	20480

Details

Name:	00000008.00000002.397030807.000000001B84B000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1B84B000
Size:	86016

Details

Name:	00000010.00000002.608971750.000001D3FD25C000.00000008.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page write copy
Base address:	1D3FD25C000
Size:	4096

Details

Name:	00000008.00000003.393602922.0000000000FEC000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FEC000
Size:	16384

Details

Name:	0000000B.00000002.608492124.00007FF57E5E9000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57E5E9000
Size:	4096

Details

Name:	00000008.00000002.396379165.0000000001230000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1230000
Size:	12288

Details

Name:	00000000.00000002.375618486.00007FF5C6773000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6773000
Size:	4096

Details

Name:	0000000D.00000003.494551762.0000000005ABC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABC000
Size:	8192

Details

Name:	00000003.00000002.600230714.00000000005F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5F0000
Size:	4096

Details

Name:	00000000.00000003.367917953.000001B863D45000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863D45000
Size:	102400

Details

Name:	00000000.00000003.369548637.000001B866C08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C08000
Size:	8192

Details

Name:	0000000F.00000002.518757892.000000000094E000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	94E000
Size:	4096

Details

Name:	0000000D.00000003.499957101.0000000005AEA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEA000
Size:	4096

Details

Name:	0000000D.00000003.494348798.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	00000008.00000002.396892766.0000000012F21000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F21000
Size:	12288

Details

Name:	00000001.00000003.358537672.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	0000000D.00000002.616252308.0000000008150000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8150000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara signature match	System Summary

Details

Name:	00000002.00000002.599993368.0000000000692000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	692000
Size:	4096

Details

Name:	0000000C.00000003.451097367.0000000000C6A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C6A000
Size:	98304

Details

Name:	0000000D.00000003.495653424.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000000.00000003.342496295.000001B865F71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F71000
Size:	131072

Details

Name:	00000003.00000003.368364870.000000001AFB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AFB0000
Size:	65536

Details

Name:	0000000D.00000003.492590445.0000000005AC4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC4000
Size:	4096

Details

Name:	00000000.00000003.341643855.000001B865BB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BB8000
Size:	12288

Details

Name:	0000000D.00000003.494527926.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	8192

Details

Name:	0000000D.00000003.500247762.0000000005AE9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AE9000
Size:	4096

Details

Name:	00000000.00000003.339522403.000001B8665EF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665EF000
Size:	65536

Details

Name:	00000002.00000003.448148916.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	0000000F.00000003.516329029.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000000.00000002.376108713.00007FF5C6989000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6989000
Size:	16384

Details

Name:	00000001.00000003.358290389.0000000000694000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	694000
Size:	8192

Details

Name:	0000000D.00000003.495866383.0000000005AD0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD0000
Size:	4096

Details

Name:	00000003.00000002.609844205.000000001AE77000.00000002.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1AE77000
Size:	12288

Details

Name:	0000000F.00000003.516156502.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	00000000.00000003.333600585.000001B86602C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602C000
Size:	4096

Details

Name:	00000002.00000002.600293491.000000000071B000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	71B000
Size:	323584

Details

Name:	00000000.00000003.370208272.000001B865F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F9F000
Size:	4096

Details

Name:	0000000C.00000003.486932966.0000000006C50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C50000
Size:	65536

Details

Name:	0000000D.00000003.492663390.0000000005ABB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABB000
Size:	4096

Details

Name:	00000002.00000003.433429202.0000000006178000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6178000
Size:	4096

Details

Name:	00000000.00000002.375882944.00007FF5C692F000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C692F000
Size:	4096

Details

Name:	00000001.00000002.367789038.000000000063B000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	63B000
Size:	200704

Details

Name:	00000008.00000003.394051087.000000001B8C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8C0000
Size:	65536

Details

Name:	00000000.00000002.375669262.00007FF5C6794000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6794000
Size:	4096

Details

Name:	00000001.00000003.358017750.000000000067B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	73728

Details

Name:	00000010.00000002.599792038.000000677B3FE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	677B3FE000
Size:	8192

Details

Name:	0000000B.00000002.600670854.0000022951EB2000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22951EB2000
Size:	16384

Details

Name:	00000008.00000003.393091643.0000000001064000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	00000001.00000003.357583790.00000000006D1000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D1000
Size:	28672

Details

Name:	0000000D.00000002.601871054.0000000001057000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1057000
Size:	4096

Details

Name:	00000010.00000002.609321474.000001D3FD400000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD400000
Size:	90112

Details

Name:	00000003.00000002.610885378.000000001B19A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B19A000
Size:	24576

Details

Name:	0000000D.00000002.616357057.00000000083BD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	83BD000
Size:	12288

Details

Name:	00000003.00000003.367553929.000000000068D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68D000
Size:	20480

Details

Name:	00000000.00000002.373778801.000001B86618B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86618B000
Size:	8192

Details

Name:	0000000D.00000003.501566987.0000000001137000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1137000
Size:	69632

Details

Name:	00000000.00000003.333546384.000001B865FA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865FA2000
Size:	233472

Details

Name:	00000002.00000003.402284313.00000000050E0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	4096

Details

Name:	0000000B.00000003.543237149.0000022951E9E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E9E000
Size:	53248

Details

Name:	00000000.00000003.339862884.000001B8665E4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B8665E4000
Size:	45056

Details

Name:	00000001.00000003.357444117.0000000000673000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	4096

Details

Name:	0000000D.00000003.500508292.0000000005AB5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB5000
Size:	36864

Details

Name:	00000000.00000003.340364209.000001B866207000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866207000
Size:	16384

Details

Name:	00000000.00000003.362653026.000001B863DFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863DFF000
Size:	16384

Details

Name:	0000000B.00000003.543217802.0000022951E2F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E2F000
Size:	4096

Details

Name:	00000003.00000003.369055130.000000000068C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	61440

Details

Name:	00000002.00000001.361010540.0000000000080000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	80000
Size:	4096

Details

Name:	00000000.00000002.373379263.000001B865B80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865B80000
Size:	20480

Details

Name:	00000010.00000003.516275136.000001D3FD188000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D3FD188000
Size:	16384

Details

Name:	0000000D.00000003.497207717.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	16384

Details

Name:	00000001.00000003.358531505.000000000068C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68C000
Size:	4096

Details

Name:	00000010.00000002.609985282.00007FF5CFBED000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFBED000
Size:	20480

Details

Name:	00000003.00000003.369213234.000000001AED0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AED0000
Size:	65536

Details

Name:	0000000C.00000002.612423070.00000000059CE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59CE000
Size:	8192

Details

Name:	00000001.00000002.365904580.0000000000550000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	550000
Size:	4096

Details

Name:	0000000D.00000003.496456758.0000000005AD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD8000
Size:	4096

Details

Name:	00000000.00000003.331821794.000001B865BC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865BC6000
Size:	8192

Details

Name:	0000000D.00000003.498130223.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	20480

Details

Name:	00000002.00000002.613196079.0000000004B7E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B7E000
Size:	8192

Details

Name:	00000008.00000002.397256295.00007FFD06780000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FFD06780000
Size:	4096

Details

Name:	0000000D.00000002.613418755.0000000005980000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5980000
Size:	12288

Details

Name:	0000000D.00000003.499717561.0000000005ABF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000001.00000002.369728840.00007FFD06782000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD06782000
Size:	4096

Details

Name:	00000003.00000002.599557490.00000000001F6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F6000
Size:	40960

Details

Name:	0000000D.00000003.500894211.0000000005AEF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AEF000
Size:	4096

Details

Name:	00000000.00000003.340123092.000001B866C08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866C08000
Size:	8192

Details

Name:	0000000F.00000003.515592412.000000000210D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	210D000
Size:	90112

Details

Name:	00000003.00000002.610819133.000000001B0E0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0E0000
Size:	4096

Details

Name:	0000000D.00000003.497505088.0000000005AD9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD9000
Size:	8192

Details

Name:	0000000F.00000003.516091485.0000000000554000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	554000
Size:	8192

Details

Name:	0000000C.00000003.451189976.0000000000C8F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8F000
Size:	65536

Details

Name:	0000000C.00000002.611828136.00000000055E4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55E4000
Size:	8192

Details

Name:	0000000C.00000003.486999879.0000000006C70000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C70000
Size:	65536

Details

Name:	00000000.00000003.332742730.000001B86638F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86638F000
Size:	516096

Details

Name:	00000000.00000003.333375196.000001B86602D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602D000
Size:	311296

Details

Name:	00000000.00000002.375899615.00007FF5C6931000.00000002.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5C6931000
Size:	8192

Details

Name:	00000000.00000003.369515686.000001B865790000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1B865790000
Size:	4096

Details

Name:	00000002.00000002.601029009.0000000000AA0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	AA0000
Size:	16384

Details

Name:	0000000D.00000003.494263675.0000000005AD5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD5000
Size:	4096

Details

Name:	0000000D.00000003.499205906.0000000005ADB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADB000
Size:	24576

Details

Name:	00000008.00000003.393911008.0000000000FF0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000D.00000003.500540872.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	20480

Details

Name:	00000000.00000002.373680493.000001B866016000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866016000
Size:	12288

Details

Name:	00000010.00000002.610218506.00007FF5CFCA4000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF5CFCA4000
Size:	4096

Details

Name:	0000000B.00000002.608068685.00007FF57DE04000.00000002.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	7FF57DE04000
Size:	4096

Details

Name:	00000001.00000003.358359554.0000000000673000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	673000
Size:	20480

Details

Name:	0000000F.00000002.518804985.000000000211B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211B000
Size:	4096

Details

Name:	00000000.00000003.369267297.000001B865F57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865F57000
Size:	32768

Details

Name:	0000000D.00000003.501136740.0000000005ADD000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADD000
Size:	69632

Details

Name:	00000008.00000003.393399570.000000001B950000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B950000
Size:	65536

Details

Name:	00000008.00000002.397161519.00007FF4C8E40000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FF4C8E40000
Size:	4096

Details

Name:	00000003.00000002.610907548.000000001B1A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B1A4000
Size:	16384

Details

Name:	00000000.00000003.361836094.000001B866185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B866185000
Size:	32768

Details

Name:	00000001.00000003.357345877.000000000068A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	68A000
Size:	20480

Details

Name:	0000000F.00000002.518605484.0000000000550000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	550000
Size:	16384

Details

Name:	00000000.00000002.371706968.000001B863E09000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B863E09000
Size:	65536

Details

Name:	00000010.00000002.609105238.000001D3FD320000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FD320000
Size:	65536

Details

Name:	0000000D.00000003.496063128.0000000005AA9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA9000
Size:	4096

Details

Name:	00000000.00000003.333571081.000001B86602C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B86602C000
Size:	4096

Details

Name:	00000000.00000003.370332671.000001B865C88000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B865C88000
Size:	8192

Details

Name:	00000010.00000002.602290967.000001D3FBE00000.00000002.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	1D3FBE00000
Size:	4096

Details

Name:	00000001.00000003.357854885.000000001B0A0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0A0000
Size:	65536

Details

Name:	00000008.00000003.393718537.000000000100E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	65536

Details

Name:	00000008.00000002.395886954.0000000000E00000.00000002.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	E00000
Size:	806912

Details

Name:	00000008.00000002.397226878.00007FFD066E3000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FFD066E3000
Size:	4096

Details

Name:	00000001.00000003.357931576.000000001B030000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B030000
Size:	65536

Details

Name:	00000003.00000002.610874038.000000001B194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B194000
Size:	20480

Details

Name:	0000000B.00000003.426464054.0000022951E28000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22951E28000
Size:	348160

Details

Name:	0000000E.00000002.514146804.0000000000540000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	540000
Size:	20480

Details

Name:	00000008.00000002.396314085.00000000011F0000.00000040.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	11F0000
Size:	8192

Details

Name:	0000000C.00000002.601040444.0000000002950000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2950000
Size:	4096

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOCReport

Files

Processes

URLs

Domains

IPs

Registry

Memdumps