Automated Malware Analysis IOC Report for

Details

Name:	00000001.00000003.541499594.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541745167.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533320367.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533344268.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.879808653.0000000004E69000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4E69000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.818767105.000000000534A000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	534A000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533291026.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.435075800.0000000004EC0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4EC0000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Found malware configuration	AV Detection
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.769267866.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533405567.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541650359.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000002.878999003.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541618354.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541536040.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533391880.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000008.00000003.476546475.0000000004610000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4610000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.879955062.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541575821.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533220855.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533248549.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.864593853.000000000524C000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	524C000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541687501.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.879938928.000000000534A000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	534A000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000007.00000003.468876713.0000000004090000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4090000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000002.878921122.0000000002D89000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D89000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.533369126.0000000005448000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5448000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.435465141.0000000002FA0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2FA0000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.541719755.0000000003338000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3338000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000001.00000003.478469222.0000000000FE0000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FE0000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000008.00000003.515461892.0000000004BB9000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4BB9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	0000000B.00000002.507300064.00007FF5B91A1000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91A1000
Size:	8192

Details

Name:	00000005.00000003.473763969.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.457117978.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000002.879571769.000000006F110000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	00000018.00000002.645835581.00007FF5868EA000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868EA000
Size:	12288

Details

Name:	0000000C.00000002.866691088.000002CD6A6D0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A6D0000
Size:	4096

Details

Name:	00000004.00000003.473328306.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.818744526.0000000002E9A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9A000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.865696844.000002CD6A4FC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A4FC000
Size:	20480

Details

Name:	00000007.00000002.509008593.00000000026A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A0000
Size:	12288

Details

Name:	0000000C.00000002.868205711.00007FF544339000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544339000
Size:	16384

Details

Name:	00000005.00000003.587854823.000000000544C000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544C000
Size:	4096

Details

Name:	0000000C.00000003.862627250.000002CD6FB20000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB20000
Size:	4096

Details

Name:	00000005.00000002.877829787.0000000002520000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2520000
Size:	8192

Details

Name:	00000005.00000003.435071502.0000000002F90000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2F90000
Size:	4096

Details

Name:	00000008.00000002.517143293.000000007F9E0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9E0000
Size:	4096

Details

Name:	00000007.00000002.508622717.00000000025CD000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25CD000
Size:	12288

Details

Name:	00000004.00000002.491901327.0000000002C1A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1A000
Size:	4096

Details

Name:	00000014.00000002.614876921.00007DF51B7D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7D0000
Size:	12288

Details

Name:	0000000C.00000002.867324924.00007DF54E1A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E1A0000
Size:	12288

Details

Name:	00000017.00000002.659496446.0000001607EF9000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607EF9000
Size:	28672

Details

Name:	00000017.00000003.639622989.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	126976

Details

Name:	00000004.00000000.353389760.000000007F5A2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A2000
Size:	4096

Details

Name:	00000005.00000002.879764728.0000000004AD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4AD0000
Size:	4096

Details

Name:	00000017.00000002.659567518.000001A26E380000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E380000
Size:	16384

Details

Name:	00000005.00000003.462074450.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000018.00000002.645588244.00007DF5906B2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906B2000
Size:	4096

Details

Name:	00000004.00000000.353398414.000000007F5B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5B0000
Size:	4096

Details

Name:	0000000B.00000002.507279371.00007FF5B9147000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9147000
Size:	4096

Details

Name:	00000008.00000002.516130178.0000000002C90000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2C90000
Size:	4096

Details

Name:	00000001.00000003.483141539.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000010.00000002.575460211.00000284829B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	284829B0000
Size:	12288

Details

Name:	0000000B.00000002.507074944.00007FF5B9075000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9075000
Size:	12288

Details

Name:	00000004.00000003.491505783.00000000035C5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35C5000
Size:	4096

Details

Name:	00000008.00000003.487093079.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	0000000B.00000002.507008478.00007FF5B8F8A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8F8A000
Size:	16384

Details

Name:	00000004.00000002.492182443.0000000002DCD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DCD000
Size:	36864

Details

Name:	00000008.00000003.486724298.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000005.00000002.879859359.0000000004F3E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F3E000
Size:	8192

Details

Name:	00000007.00000000.366829433.00000000026A8000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A8000
Size:	16384

Details

Name:	0000000B.00000002.506555696.00000074D06FE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D06FE000
Size:	8192

Details

Name:	00000001.00000003.490678799.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000001.00000003.492525788.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.508553176.000000000258B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	258B000
Size:	24576

Details

Name:	00000004.00000003.471184499.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000014.00000003.613843519.00000189CB84F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB84F000
Size:	114688

Details

Name:	00000001.00000002.877767485.00000000007BB000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7BB000
Size:	20480

Details

Name:	00000017.00000002.659371345.00000016073EB000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16073EB000
Size:	20480

Details

Name:	00000001.00000002.879232792.00000000040A0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40A0000
Size:	65536

Details

Name:	00000017.00000002.659554218.000001A26E280000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E280000
Size:	4096

Details

Name:	0000000C.00000002.867527417.00007FF543F69000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543F69000
Size:	8192

Details

Name:	00000004.00000003.462242173.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000003.476529283.0000000004600000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4600000
Size:	4096

Details

Name:	00000011.00000002.877708602.00000035604FB000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	35604FB000
Size:	20480

Details

Name:	00000010.00000002.577022342.00007FF509E02000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509E02000
Size:	12288

Details

Name:	00000011.00000002.878828868.00007FF599D51000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D51000
Size:	8192

Details

Name:	00000001.00000002.877959118.0000000000AAF000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AAF000
Size:	4096

Details

Name:	00000008.00000003.476707420.0000000002CDD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CDD000
Size:	69632

Details

Name:	00000001.00000003.681931187.0000000000C25000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C25000
Size:	94208

Details

Name:	00000004.00000003.467224390.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.881123461.000000007FC50000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC50000
Size:	12288

Details

Name:	00000001.00000003.539523788.0000000000C7C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C7C000
Size:	16384

Details

Name:	0000000C.00000002.868031922.00007FF5442DF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442DF000
Size:	4096

Details

Name:	00000004.00000003.469040564.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.634091459.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000003.647178142.000001A26F263000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F263000
Size:	397312

Details

Name:	00000005.00000003.577210835.0000000002E11000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E11000
Size:	86016

Details

Name:	00000017.00000003.643163833.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	131072

Details

Name:	00000001.00000003.479566556.0000000001010000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000008.00000002.516050950.00000000029E0000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	29E0000
Size:	20480

Details

Name:	00000005.00000002.878663832.00000000031F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31F0000
Size:	69632

Details

Name:	00000004.00000003.469944752.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000018.00000002.645277182.000000ACEA6FC000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACEA6FC000
Size:	16384

Details

Name:	00000014.00000002.614543010.000000818927B000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	818927B000
Size:	20480

Details

Name:	00000007.00000003.485630526.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.452362261.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000017.00000002.659705445.000001A26E470000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E470000
Size:	94208

Details

Name:	00000010.00000002.575768859.0000028482CD0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28482CD0000
Size:	4096

Details

Name:	0000000C.00000003.518240132.000002CD6FA50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA50000
Size:	28672

Details

Name:	00000017.00000002.659962704.000001A26E516000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E516000
Size:	4096

Details

Name:	00000017.00000003.639566968.000001A26ED9F000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9F000
Size:	110592

Details

Name:	0000000B.00000003.506399657.000001C2A3065000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3065000
Size:	40960

Details

Name:	00000005.00000003.529917059.0000000005820000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5820000
Size:	4096

Details

Name:	00000001.00000002.879947393.000000006F19E000.00000008.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	6F19E000
Size:	28672

Details

Name:	00000001.00000003.589790704.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.877848015.0000000000A30000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	4096

Details

Name:	00000005.00000003.583398064.0000000002E07000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E07000
Size:	8192

Details

Name:	00000005.00000003.480226525.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000010.00000000.559701039.00007DF513BA2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BA2000
Size:	4096

Details

Name:	0000000B.00000002.506698511.000001C2A303C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A303C000
Size:	61440

Details

Name:	00000005.00000003.486522597.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.451759909.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000002.867576055.00007FF544093000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544093000
Size:	16384

Details

Name:	00000004.00000002.492999483.0000000005040000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5040000
Size:	4096

Details

Name:	00000014.00000002.614945516.00007FF5113CF000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5113CF000
Size:	4096

Details

Name:	00000005.00000002.879079920.00000000048BC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	48BC000
Size:	4096

Details

Name:	0000000B.00000000.494629640.00007DF5C2FA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2FA0000
Size:	4096

Details

Name:	00000010.00000002.576009558.00007FF5097BF000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5097BF000
Size:	4096

Details

Name:	0000000C.00000002.867068559.000002CD6FCAC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCAC000
Size:	32768

Details

Name:	00000017.00000002.659446124.0000001607A7A000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607A7A000
Size:	24576

Details

Name:	00000017.00000003.646855132.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	397312

Details

Name:	00000017.00000002.659853138.000001A26E4D8000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4D8000
Size:	32768

Details

Name:	00000005.00000003.725720471.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	819200

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000002.515751028.000000000086B000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86B000
Size:	20480

Details

Name:	00000017.00000003.648877903.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	8192

Details

Name:	0000000C.00000002.867211419.000002CD6FCFF000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCFF000
Size:	8192

Details

Name:	00000001.00000002.878048138.0000000000BC8000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BC8000
Size:	376832

Details

Name:	00000010.00000002.576696554.00007FF509DB1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DB1000
Size:	8192

Details

Name:	00000001.00000003.867687164.0000000004131000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4131000
Size:	307200

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.878304315.0000000002C30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	8192

Details

Name:	00000008.00000002.516184109.0000000002CCA000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CCA000
Size:	28672

Details

Name:	00000004.00000002.492672940.0000000003A20000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3A20000
Size:	4096

Details

Name:	00000001.00000003.491279483.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000010.00000003.575001404.0000028482A50000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A50000
Size:	114688

Details

Name:	00000017.00000002.659423558.000000160787F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	160787F000
Size:	4096

Details

Name:	00000001.00000003.482773604.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000004.00000003.480964304.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.660844208.00007FF5D08B4000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08B4000
Size:	8192

Details

Name:	0000000C.00000002.866199486.000000EF438FF000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF438FF000
Size:	4096

Details

Name:	0000000C.00000002.868161567.00007FF544326000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544326000
Size:	16384

Details

Name:	0000000C.00000002.867978827.00007FF5442C0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442C0000
Size:	8192

Details

Name:	00000001.00000003.637076586.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.507082403.00007FF5B90EF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B90EF000
Size:	4096

Details

Name:	00000010.00000002.576413752.00007FF509D1D000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D1D000
Size:	20480

Details

Name:	00000018.00000000.633478822.00007DF5906C0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906C0000
Size:	4096

Details

Name:	00000011.00000002.878361529.0000017507B00000.00000002.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	17507B00000
Size:	4096

Details

Name:	0000000C.00000002.866567917.000002CD6A49F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A49F000
Size:	4096

Details

Name:	00000008.00000002.516152495.0000000002CAA000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CAA000
Size:	118784

Details

Name:	00000017.00000002.660074850.000001A26EC02000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EC02000
Size:	4096

Details

Name:	0000000C.00000002.867810726.00007FF54418F000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54418F000
Size:	12288

Details

Name:	00000001.00000002.878361018.000000000100D000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	100D000
Size:	12288

Details

Name:	00000005.00000002.877818363.000000000251D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	251D000
Size:	8192

Details

Name:	0000000B.00000002.506748948.000001C2A3088000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3088000
Size:	36864

Details

Name:	00000004.00000003.481317605.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.516079026.0000000002A04000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A04000
Size:	4096

Details

Name:	00000001.00000002.879073346.0000000003B8A000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3B8A000
Size:	24576

Details

Name:	00000010.00000002.576231954.00007FF509C18000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509C18000
Size:	4096

Details

Name:	00000004.00000003.463548368.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000018.00000002.645692887.00007FF586825000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586825000
Size:	16384

Details

Name:	00000017.00000002.661130562.00007FF5D09B6000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D09B6000
Size:	16384

Details

Name:	00000005.00000003.679036456.0000000002E9E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9E000
Size:	4096

Details

Name:	00000007.00000003.481510615.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000008.00000000.379059220.000000007F9F0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9F0000
Size:	12288

Details

Name:	00000010.00000002.575779925.0000028482ED0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28482ED0000
Size:	12288

Details

Name:	00000014.00000002.615303170.00007FF5119CD000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119CD000
Size:	12288

Details

Name:	00000001.00000003.682259026.0000000000C3C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	8192

Details

Name:	00000018.00000002.645493684.000001AEC2150000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC2150000
Size:	8192

Details

Name:	00000004.00000003.437541656.00000000035CD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35CD000
Size:	16384

Details

Name:	0000000C.00000003.865872887.000002CD6AD02000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD02000
Size:	4096

Details

Name:	0000000C.00000002.866632518.000002CD6A4FC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A4FC000
Size:	20480

Details

Name:	00000007.00000000.368870331.000000007FCA0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCA0000
Size:	12288

Details

Name:	00000005.00000002.880334891.0000000005A91000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A91000
Size:	4096

Details

Name:	00000008.00000003.484052015.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000014.00000003.613949806.00000189CB84B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB84B000
Size:	8192

Details

Name:	00000004.00000003.490513547.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.632357879.0000000002E54000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E54000
Size:	262144

Details

Name:	00000010.00000002.576878053.00007FF509DC7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DC7000
Size:	12288

Details

Name:	00000001.00000003.821237701.0000000000CAE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.486958723.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.660805496.00007FF5D08A0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08A0000
Size:	8192

Details

Name:	00000005.00000002.877762051.00000000024EE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24EE000
Size:	4096

Details

Name:	00000004.00000003.482961699.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.478082987.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.577073949.0000000002E57000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E57000
Size:	249856

Details

Name:	00000017.00000002.661053381.00007FF5D097D000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D097D000
Size:	12288

Details

Name:	00000005.00000002.879845894.0000000004EE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4EE8000
Size:	4096

Details

Name:	0000000C.00000003.865736137.000002CD6B470000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6B470000
Size:	4096

Details

Name:	00000017.00000002.659469155.0000001607C7E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607C7E000
Size:	8192

Details

Name:	00000004.00000003.488166209.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000002.878164453.0000000000C25000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C25000
Size:	106496

Details

Name:	00000017.00000003.646930008.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	397312

Details

Name:	00000001.00000002.879976620.000000006F1A5000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F1A5000
Size:	8192

Details

Name:	0000000B.00000002.507374065.00007FF5B91B7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91B7000
Size:	12288

Details

Name:	00000017.00000002.660208033.000001A26ED6B000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED6B000
Size:	73728

Details

Name:	00000017.00000002.660547104.00007FF5D0588000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0588000
Size:	4096

Details

Name:	00000005.00000003.532563102.0000000002E50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E50000
Size:	4096

Details

Name:	00000005.00000002.879715224.0000000004A4A000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A4A000
Size:	24576

Details

Name:	00000011.00000002.878469143.00007DF5A3B60000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B60000
Size:	12288

Details

Name:	00000008.00000002.516855347.0000000004790000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4790000
Size:	4096

Details

Name:	0000000C.00000002.867493373.00007FF543F12000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543F12000
Size:	8192

Details

Name:	00000001.00000003.730248988.00000000041BE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	41BE000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.508701869.000000000264B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	264B000
Size:	4096

Details

Name:	00000007.00000003.491554542.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000007.00000003.490177050.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000008.00000003.479192676.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	00000011.00000002.878566446.00007FF599589000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599589000
Size:	16384

Details

Name:	00000004.00000003.485388633.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.466596174.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000B.00000002.506834268.000001C2A3602000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3602000
Size:	4096

Details

Name:	00000017.00000002.659546788.000001A26E270000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E270000
Size:	12288

Details

Name:	00000001.00000003.821943370.0000000000C9D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9D000
Size:	4096

Details

Name:	00000010.00000002.576440545.00007FF509D26000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D26000
Size:	12288

Details

Name:	0000000C.00000002.867926438.00007FF544295000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544295000
Size:	32768

Details

Name:	00000005.00000002.877842247.0000000002525000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2525000
Size:	4096

Details

Name:	00000008.00000003.486531626.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000001.00000002.877912069.0000000000AA1000.00000020.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	AA1000
Size:	45056

Details

Name:	00000017.00000003.641367776.000001A26EDAB000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDAB000
Size:	118784

Details

Name:	00000014.00000002.614735817.00000189CB86C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB86C000
Size:	73728

Details

Name:	00000005.00000003.460131891.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000000.353385042.000000007F5A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	4096

Details

Name:	00000001.00000001.352672708.000000006F3A0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F3A0000
Size:	4096

Details

Name:	00000005.00000002.878614067.0000000002FE7000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2FE7000
Size:	12288

Details

Name:	00000007.00000002.508615539.00000000025CA000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25CA000
Size:	8192

Details

Name:	00000001.00000002.878792348.0000000002940000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2940000
Size:	16384

Details

Name:	0000000B.00000002.506871339.00007DF5C2FB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2FB0000
Size:	12288

Details

Name:	00000007.00000002.508259722.00000000002F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F0000
Size:	4096

Details

Name:	00000014.00000002.614619064.00000189CB6B0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CB6B0000
Size:	12288

Details

Name:	00000017.00000002.659896983.000001A26E4F6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4F6000
Size:	45056

Details

Name:	00000005.00000002.878337301.0000000002CC0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CC0000
Size:	4096

Details

Name:	00000001.00000003.486624556.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000011.00000002.878603138.00007FF5995E1000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5995E1000
Size:	4096

Details

Name:	00000005.00000003.461438914.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000003.480016817.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	0000000C.00000003.522627067.000002CD6FA50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA50000
Size:	4096

Details

Name:	00000001.00000002.877836988.0000000000A20000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A20000
Size:	8192

Details

Name:	00000001.00000003.539447135.0000000000C3C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	4096

Details

Name:	00000007.00000000.368099658.000000007FC90000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC90000
Size:	4096

Details

Name:	00000018.00000002.645535735.000001AEC24D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC24D0000
Size:	69632

Details

Name:	00000017.00000002.659996692.000001A26E980000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E980000
Size:	4096

Details

Name:	00000011.00000000.562391531.00007FF599DA7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599DA7000
Size:	16384

Details

Name:	00000007.00000003.489984243.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000002.878147378.00000000026F8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F8000
Size:	16384

Details

Name:	0000000B.00000002.506866454.00007DF5C2FA2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2FA2000
Size:	4096

Details

Name:	00000014.00000002.615256507.00007FF51195D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51195D000
Size:	20480

Details

Name:	00000005.00000003.451458260.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.632245617.0000000002E37000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E37000
Size:	106496

Details

Name:	00000014.00000000.602336547.00007DF51B7B2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7B2000
Size:	4096

Details

Name:	00000005.00000002.878976333.00000000047CF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	47CF000
Size:	4096

Details

Name:	00000005.00000002.879877508.0000000004F7F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F7F000
Size:	4096

Details

Name:	00000017.00000003.636961356.000001A26EDD6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDD6000
Size:	114688

Details

Name:	00000005.00000002.879090255.00000000048BD000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	48BD000
Size:	8192

Details

Name:	00000008.00000003.484829632.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000008.00000003.482270089.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000005.00000002.877975741.0000000002625000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2625000
Size:	20480

Details

Name:	00000005.00000002.879748924.0000000004ACA000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ACA000
Size:	24576

Details

Name:	00000001.00000003.589748928.0000000000C88000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C88000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.866718567.000002CD6A8E0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A8E0000
Size:	12288

Details

Name:	0000000B.00000002.507090112.00007FF5B90F1000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B90F1000
Size:	8192

Details

Name:	0000000B.00000002.507364704.00007FF5B91B4000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91B4000
Size:	8192

Details

Name:	00000011.00000002.878675497.00007FF599B2C000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599B2C000
Size:	8192

Details

Name:	00000014.00000002.615273517.00007FF511969000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511969000
Size:	4096

Details

Name:	00000001.00000003.730182576.0000000004131000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4131000
Size:	307200

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.506565820.00000074D077E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D077E000
Size:	8192

Details

Name:	0000000B.00000002.507137508.00007FF5B910D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B910D000
Size:	20480

Details

Name:	00000005.00000002.880545009.000000006F120000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6F120000
Size:	331776

Details

Name:	00000017.00000002.660430633.00007FF5D0259000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0259000
Size:	4096

Details

Name:	00000001.00000003.865492967.0000000000C9D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9D000
Size:	4096

Details

Name:	00000005.00000002.878554160.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.506647879.000001C2A2F00000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A2F00000
Size:	16384

Details

Name:	00000010.00000002.575812357.0000028483140000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28483140000
Size:	4096

Details

Name:	0000000C.00000002.868277712.00007FF54439D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54439D000
Size:	12288

Details

Name:	00000004.00000003.465691960.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.866850510.000002CD6FC10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC10000
Size:	61440

Details

Name:	00000017.00000003.646752686.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	159744

Details

Name:	00000007.00000002.509282830.000000007FC92000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC92000
Size:	4096

Details

Name:	00000004.00000003.450419643.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.866665024.000002CD6A507000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A507000
Size:	28672

Details

Name:	00000017.00000002.659665740.000001A26E454000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E454000
Size:	16384

Details

Name:	00000001.00000003.489677720.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000014.00000002.614831780.00000189CC002000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CC002000
Size:	4096

Details

Name:	00000010.00000002.576070540.00007FF509A75000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509A75000
Size:	4096

Details

Name:	00000017.00000002.660533455.00007FF5D0522000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0522000
Size:	4096

Details

Name:	0000000C.00000002.868004101.00007FF5442C9000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442C9000
Size:	16384

Details

Name:	00000004.00000002.492696686.0000000004ED0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4ED0000
Size:	12288

Details

Name:	00000017.00000002.659946695.000001A26E513000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E513000
Size:	8192

Details

Name:	0000000C.00000002.868101654.00007FF5442FD000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442FD000
Size:	20480

Details

Name:	00000001.00000000.351844517.000000007F620000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F620000
Size:	4096

Details

Name:	00000014.00000002.614532967.000000818917C000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	818917C000
Size:	16384

Details

Name:	00000005.00000003.726252541.00000000059C6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59C6000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.880316219.0000000005A40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.478877827.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	00000004.00000002.492609026.00000000035D5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35D5000
Size:	4096

Details

Name:	00000004.00000002.493047281.000000007F4A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4A0000
Size:	20480

Details

Name:	00000017.00000002.660907321.00007FF5D08DD000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08DD000
Size:	20480

Details

Name:	00000017.00000003.641352105.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	32768

Details

Name:	00000005.00000000.353740162.0000000002930000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2930000
Size:	102400

Details

Name:	00000007.00000003.489583869.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000001.00000002.880115336.000000007F610000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	4096

Details

Name:	00000005.00000002.878028927.0000000002688000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2688000
Size:	57344

Details

Name:	00000008.00000003.486187985.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000004.00000002.492034792.0000000002D61000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D61000
Size:	24576

Details

Name:	00000017.00000002.660777666.00007FF5D0875000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0875000
Size:	4096

Details

Name:	00000017.00000003.659196973.000001A26E452000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E452000
Size:	24576

Details

Name:	00000010.00000002.575357573.000000CC4C8FB000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4C8FB000
Size:	20480

Details

Name:	00000004.00000003.486791492.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000003.492957482.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.456783458.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000003.484288702.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000004.00000003.480021626.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000014.00000002.615038263.00007FF5117E7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5117E7000
Size:	4096

Details

Name:	00000004.00000003.468739153.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.867959981.00007FF5442B4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442B4000
Size:	8192

Details

Name:	00000005.00000003.679056128.0000000002E94000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E94000
Size:	8192

Details

Name:	00000004.00000003.467533466.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000003.518247402.000002CD6FA58000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA58000
Size:	16384

Details

Name:	00000018.00000002.645138517.000000ACEA18A000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ACEA18A000
Size:	24576

Details

Name:	0000000C.00000002.867759016.00007FF54417A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54417A000
Size:	16384

Details

Name:	00000007.00000002.508639826.00000000025D5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D5000
Size:	20480

Details

Name:	00000004.00000003.471485598.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000014.00000002.614552326.0000008189377000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8189377000
Size:	36864

Details

Name:	00000005.00000000.353771205.000000007FC32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC32000
Size:	4096

Details

Name:	00000005.00000003.481432078.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000002.878575660.0000000002FCE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FCE000
Size:	8192

Details

Name:	00000007.00000002.509023393.00000000028B0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B0000
Size:	36864

Details

Name:	00000005.00000003.633553852.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	790528

Details

Name:	00000011.00000002.878016808.0000017506DA1000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17506DA1000
Size:	147456

Details

Name:	00000018.00000002.645826328.00007FF5868DB000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868DB000
Size:	16384

Details

Name:	00000001.00000003.485387423.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.508517617.00000000024A5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24A5000
Size:	28672

Details

Name:	00000010.00000002.575754005.0000028482B13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482B13000
Size:	12288

Details

Name:	00000017.00000002.660919139.00007FF5D08E6000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08E6000
Size:	12288

Details

Name:	0000000C.00000002.867540219.00007FF54402B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54402B000
Size:	4096

Details

Name:	00000014.00000002.614656761.00000189CB800000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB800000
Size:	4096

Details

Name:	00000005.00000003.818735906.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000002.515984694.0000000002668000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2668000
Size:	20480

Details

Name:	00000017.00000002.660607512.00007FF5D06FE000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D06FE000
Size:	4096

Details

Name:	00000018.00000002.645475356.000001AEC2060000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2060000
Size:	57344

Details

Name:	00000004.00000003.434347714.0000000003540000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3540000
Size:	4096

Details

Name:	00000001.00000000.351847347.000000007F622000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F622000
Size:	4096

Details

Name:	00000017.00000002.659673125.000001A26E459000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E459000
Size:	36864

Details

Name:	0000000C.00000003.864709851.000002CD6F940000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6F940000
Size:	4096

Details

Name:	00000007.00000003.492321178.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000001.00000002.878878745.0000000002A10000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2A10000
Size:	4096

Details

Name:	00000007.00000002.509033995.0000000002AB0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AB0000
Size:	69632

Details

Name:	00000005.00000003.474667258.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000000.517722088.00007DF54E190000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E190000
Size:	4096

Details

Name:	00000011.00000002.877739087.00000035605FE000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	35605FE000
Size:	8192

Details

Name:	00000018.00000002.645571266.00007DF48E580000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF48E580000
Size:	20480

Details

Name:	0000000C.00000003.519090935.000002CD6FBB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FBB0000
Size:	4096

Details

Name:	00000001.00000002.880160353.000000007F620000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F620000
Size:	4096

Details

Name:	00000004.00000002.492614371.00000000035D7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35D7000
Size:	61440

Details

Name:	00000017.00000003.643670804.000001A26ED8C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8C000
Size:	24576

Details

Name:	00000005.00000003.452664073.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000003.465390473.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.866678624.000002CD6A514000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A514000
Size:	8192

Details

Name:	00000004.00000003.451357900.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.457218117.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000000.353416339.000000007F5C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5C0000
Size:	12288

Details

Name:	0000000B.00000003.506410237.000001C2A304B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A304B000
Size:	24576

Details

Name:	00000001.00000002.879485371.0000000004206000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4206000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.867593967.00007FF54409A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54409A000
Size:	4096

Details

Name:	00000001.00000003.636859771.0000000004131000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4131000
Size:	307200

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.456247002.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000007.00000003.478988119.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000011.00000003.562857248.0000017506DE1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17506DE1000
Size:	8192

Details

Name:	00000004.00000003.455644192.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.660505624.00007FF5D0471000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0471000
Size:	20480

Details

Name:	00000004.00000003.487898156.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000002.508610100.00000000025C2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C2000
Size:	4096

Details

Name:	00000017.00000002.659592359.000001A26E400000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E400000
Size:	73728

Details

Name:	0000000B.00000002.507212841.00007FF5B9136000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9136000
Size:	16384

Details

Name:	00000010.00000003.575052401.0000028482A4E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A4E000
Size:	8192

Details

Name:	00000010.00000002.576894911.00007FF509DCB000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DCB000
Size:	16384

Details

Name:	00000018.00000002.645506663.000001AEC2170000.00000004.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1AEC2170000
Size:	4096

Details

Name:	00000010.00000002.575878337.00007DF513BB0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BB0000
Size:	4096

Details

Name:	00000004.00000003.455041176.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000011.00000002.878217269.0000017507040000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17507040000
Size:	4096

Details

Name:	00000008.00000002.516860414.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	00000005.00000003.634860388.0000000002E37000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E37000
Size:	106496

Details

Name:	00000008.00000003.476698943.0000000002CCF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CCF000
Size:	8192

Details

Name:	00000005.00000003.481632918.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.577200580.0000000002E07000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E07000
Size:	8192

Details

Name:	00000018.00000002.645371719.000001AEC1F10000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC1F10000
Size:	12288

Details

Name:	00000011.00000002.877783997.0000017506BB0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17506BB0000
Size:	4096

Details

Name:	0000000C.00000002.867019236.000002CD6FC88000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC88000
Size:	143360

Details

Name:	00000001.00000002.878817173.0000000002946000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2946000
Size:	12288

Details

Name:	0000000B.00000002.506854900.00007DF5C2F92000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2F92000
Size:	4096

Details

Name:	0000000C.00000002.868262921.00007FF544397000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544397000
Size:	20480

Details

Name:	00000001.00000003.479206964.0000000001010000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000004.00000003.474332125.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.575618576.0000028482A52000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A52000
Size:	106496

Details

Name:	00000004.00000003.437522062.00000000035EC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EC000
Size:	32768

Details

Name:	00000001.00000002.878849815.00000000029CE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29CE000
Size:	8192

Details

Name:	00000001.00000002.880032925.000000006F244000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F244000
Size:	8192

Details

Name:	00000017.00000003.637009137.000001A26EDBA000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDBA000
Size:	114688

Details

Name:	00000007.00000003.488872054.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000011.00000002.878405162.00007DF4A1A10000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A1A10000
Size:	20480

Details

Name:	00000017.00000002.659977592.000001A26E800000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E800000
Size:	12288

Details

Name:	00000004.00000002.492573574.00000000035AA000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	35AA000
Size:	110592

Details

Name:	00000008.00000002.516038381.00000000026A8000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A8000
Size:	16384

Details

Name:	00000011.00000003.562794438.0000017506DE1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17506DE1000
Size:	8192

Details

Name:	00000001.00000003.482962039.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000005.00000003.453266838.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000002.879469464.00000000041BD000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	41BD000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.489677275.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.490512287.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000011.00000002.878953702.00007FF599DA7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599DA7000
Size:	16384

Details

Name:	00000001.00000003.541770973.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Details

Name:	00000010.00000002.575369014.000000CC4C97F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4C97F000
Size:	4096

Details

Name:	00000005.00000002.880894367.000000006F1A5000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F1A5000
Size:	8192

Details

Name:	00000014.00000002.614780189.00000189CB908000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB908000
Size:	24576

Details

Name:	00000004.00000002.492208335.0000000002DE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE0000
Size:	12288

Details

Name:	0000000B.00000002.506861544.00007DF5C2FA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2FA0000
Size:	4096

Details

Name:	00000018.00000002.645741005.00007FF586869000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586869000
Size:	4096

Details

Name:	00000005.00000002.880177931.0000000005940000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5940000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.615348567.00007FF511A03000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511A03000
Size:	8192

Details

Name:	00000007.00000003.507952658.0000000004200000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4200000
Size:	8192

Details

Name:	0000000B.00000002.506662182.000001C2A3002000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3002000
Size:	65536

Details

Name:	00000007.00000002.508357290.000000000063E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	63E000
Size:	8192

Details

Name:	00000008.00000002.515856419.00000000025C2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C2000
Size:	4096

Details

Name:	00000014.00000002.614749308.00000189CB87F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB87F000
Size:	4096

Details

Name:	00000001.00000003.867023982.00000000042E8000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42E8000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.518266062.000002CD6FA71000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA71000
Size:	4096

Details

Name:	00000005.00000001.355142794.000000006F110000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	00000017.00000003.659130479.000001A26ED5B000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED5B000
Size:	61440

Details

Name:	00000017.00000002.660184989.000001A26ED5D000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED5D000
Size:	53248

Details

Name:	00000018.00000002.645750133.00007FF5868C1000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868C1000
Size:	8192

Details

Name:	00000005.00000003.484780973.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000003.485585761.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000001.00000002.877991001.0000000000AD5000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AD5000
Size:	16384

Details

Name:	00000014.00000002.614804542.00000189CBC00000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CBC00000
Size:	12288

Details

Name:	00000005.00000003.451156738.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000007.00000003.480293641.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000004.00000002.492548480.0000000003557000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3557000
Size:	12288

Details

Name:	0000000C.00000002.868318352.00007FF5443A7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443A7000
Size:	32768

Details

Name:	00000001.00000002.879370473.0000000004130000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4130000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.867508045.00007FF543F42000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543F42000
Size:	4096

Details

Name:	00000007.00000003.477183563.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000001.00000003.491682242.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000C.00000002.867654471.00007FF5440D9000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440D9000
Size:	4096

Details

Name:	00000018.00000002.645486606.000001AEC2130000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2130000
Size:	8192

Details

Name:	00000005.00000003.773637380.0000000002E98000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E98000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.863790929.000002CD6FA80000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA80000
Size:	4096

Details

Name:	00000001.00000002.879395107.000000000417B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	417B000
Size:	4096

Details

Name:	00000001.00000003.865503996.0000000000CAE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAE000
Size:	4096

Details

Name:	0000000C.00000002.867847406.00007FF5441B7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5441B7000
Size:	4096

Details

Name:	00000014.00000002.614996031.00007FF511685000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511685000
Size:	4096

Details

Name:	00000010.00000000.559708768.00007DF513BB0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BB0000
Size:	4096

Details

Name:	00000005.00000002.880288444.0000000005A09000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A09000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000003.506365317.000001C2A307F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A307F000
Size:	32768

Details

Name:	0000000C.00000002.867286782.00007DF54E182000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E182000
Size:	4096

Details

Name:	00000017.00000002.660498033.00007FF5D0446000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0446000
Size:	4096

Details

Name:	00000004.00000003.454739801.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.681830964.0000000000CAE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.452563557.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.532109674.0000000002E50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E50000
Size:	4096

Details

Name:	0000000C.00000002.866476682.000002CD6A471000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A471000
Size:	4096

Details

Name:	00000001.00000002.879059151.0000000003A8F000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3A8F000
Size:	4096

Details

Name:	0000000C.00000000.517708593.00007DF54E180000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E180000
Size:	4096

Details

Name:	00000008.00000003.481715410.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000017.00000002.660952718.00007FF5D08F2000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08F2000
Size:	49152

Details

Name:	00000010.00000003.575061141.0000028482A4C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A4C000
Size:	8192

Details

Name:	0000000C.00000003.518343561.000002CD6FA90000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA90000
Size:	4096

Details

Name:	00000017.00000003.645543546.000001A26F26A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F26A000
Size:	425984

Details

Name:	0000000C.00000002.867678610.00007FF5440E6000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440E6000
Size:	4096

Details

Name:	00000005.00000002.877785028.000000000250D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	250D000
Size:	12288

Details

Name:	0000000B.00000002.506620819.000001C2A2DD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A2DD0000
Size:	102400

Details

Name:	00000005.00000003.632095387.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.865892286.000002CD6AD00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD00000
Size:	4096

Details

Name:	00000004.00000003.485519655.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000011.00000002.878652044.00007FF59962A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59962A000
Size:	4096

Details

Name:	00000004.00000003.491457857.0000000004EF0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4EF0000
Size:	8192

Details

Name:	00000007.00000000.367697504.000000007FC82000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC82000
Size:	4096

Details

Name:	00000005.00000002.879999030.00000000057DE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	57DE000
Size:	8192

Details

Name:	00000017.00000002.660983702.00007FF5D090D000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D090D000
Size:	20480

Details

Name:	00000008.00000002.516896402.000000000483F000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	483F000
Size:	4096

Details

Name:	00000005.00000002.877748539.00000000024E8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24E8000
Size:	4096

Details

Name:	00000004.00000002.492593898.00000000035CC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35CC000
Size:	16384

Details

Name:	00000007.00000003.491683729.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.486894198.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000002.491975990.0000000002D02000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D02000
Size:	4096

Details

Name:	0000000C.00000002.868379044.00007FF5443D6000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443D6000
Size:	16384

Details

Name:	00000004.00000000.353360330.0000000002DE8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE8000
Size:	16384

Details

Name:	00000004.00000003.448313431.0000000005050000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5050000
Size:	4096

Details

Name:	00000004.00000002.491963544.0000000002CEF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CEF000
Size:	32768

Details

Name:	00000017.00000003.643186101.000001A26EDB9000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDB9000
Size:	65536

Details

Name:	00000005.00000002.880749419.000000006F171000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F171000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000017.00000000.631927136.00007DF5DA762000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA762000
Size:	4096

Details

Name:	00000008.00000002.516045003.00000000029C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29C0000
Size:	4096

Details

Name:	00000004.00000002.493056879.000000007F5A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	4096

Details

Name:	00000017.00000002.660451402.00007FF5D0379000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0379000
Size:	16384

Details

Name:	0000000C.00000002.867710514.00007FF5440F0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440F0000
Size:	8192

Details

Name:	00000017.00000000.631949568.00007DF5DA780000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA780000
Size:	12288

Details

Name:	00000005.00000002.878638733.0000000002FF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FF0000
Size:	36864

Details

Name:	00000011.00000000.562277220.00007DF5A3B40000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B40000
Size:	4096

Details

Name:	00000005.00000003.480829116.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000B.00000002.506988498.00007FF5B8CA7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8CA7000
Size:	32768

Details

Name:	00000011.00000002.878076146.0000017506DC7000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17506DC7000
Size:	245760

Details

Name:	00000011.00000002.878613775.00007FF599621000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599621000
Size:	12288

Details

Name:	00000007.00000002.508240763.00000000002DB000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2DB000
Size:	20480

Details

Name:	00000007.00000002.508512310.0000000002483000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2483000
Size:	4096

Details

Name:	0000000B.00000002.506801677.000001C2A3400000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A3400000
Size:	12288

Details

Name:	0000000C.00000002.867696268.00007FF5440EA000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440EA000
Size:	12288

Details

Name:	00000017.00000002.660351869.00007DF5DA780000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA780000
Size:	12288

Details

Name:	00000001.00000003.682327900.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Details

Name:	00000007.00000002.509255641.000000007FC80000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC80000
Size:	4096

Details

Name:	00000005.00000002.878330427.0000000002CB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CB0000
Size:	4096

Details

Name:	00000004.00000003.491280937.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.462376104.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.818724339.0000000002E9F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9F000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.508632221.00000000025D1000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D1000
Size:	8192

Details

Name:	00000005.00000003.458926975.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000003.865805282.000002CD6FB90000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB90000
Size:	4096

Details

Name:	00000005.00000000.353732007.00000000026F8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F8000
Size:	16384

Details

Name:	00000004.00000003.489986209.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.575589889.0000028482A3C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A3C000
Size:	53248

Details

Name:	00000005.00000003.462687090.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000010.00000002.576028251.00007FF5098B1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5098B1000
Size:	20480

Details

Name:	00000010.00000002.575325454.000000CC4C67E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4C67E000
Size:	8192

Details

Name:	00000008.00000002.516872699.0000000004831000.00000020.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	4831000
Size:	45056

Details

Name:	00000008.00000002.515964849.0000000002656000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2656000
Size:	16384

Details

Name:	00000004.00000002.492541428.0000000003550000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3550000
Size:	20480

Details

Name:	0000000C.00000002.867174246.000002CD6FCEA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCEA000
Size:	36864

Details

Name:	00000017.00000002.660785865.00007FF5D0877000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0877000
Size:	24576

Details

Name:	00000005.00000002.878120410.00000000026D4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26D4000
Size:	32768

Details

Name:	00000017.00000002.659637846.000001A26E43C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E43C000
Size:	49152

Details

Name:	0000000B.00000002.506604502.00000074D0D7E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D0D7E000
Size:	8192

Details

Name:	00000011.00000002.878791783.00007FF599CED000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599CED000
Size:	20480

Details

Name:	00000007.00000003.483646143.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000004.00000002.492635542.00000000036A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	36A0000
Size:	36864

Details

Name:	00000001.00000000.351841214.000000007F612000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F612000
Size:	4096

Details

Name:	00000005.00000003.577188059.0000000002E05000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E05000
Size:	4096

Details

Name:	00000005.00000003.634903285.0000000002E52000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E52000
Size:	4096

Details

Name:	00000008.00000002.515930412.0000000002635000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2635000
Size:	4096

Details

Name:	00000005.00000003.578874077.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	516096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000003.641479263.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	147456

Details

Name:	00000008.00000002.515891050.00000000025D5000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D5000
Size:	20480

Details

Name:	0000000C.00000002.868249909.00007FF544394000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544394000
Size:	8192

Details

Name:	00000004.00000003.464151938.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000011.00000002.878807423.00007FF599CF7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599CF7000
Size:	4096

Details

Name:	00000001.00000002.878028646.0000000000BBB000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BBB000
Size:	49152

Details

Name:	00000014.00000002.614797817.00000189CBA00000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CBA00000
Size:	4096

Details

Name:	00000008.00000002.516100144.0000000002C27000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C27000
Size:	12288

Details

Name:	0000000C.00000002.866922066.000002CD6FC43000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC43000
Size:	49152

Details

Name:	00000007.00000002.508650027.00000000025DB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25DB000
Size:	49152

Details

Name:	0000000B.00000002.506826559.000001C2A3580000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A3580000
Size:	4096

Details

Name:	0000000C.00000003.862148188.000002CD6FEA0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FEA0000
Size:	4096

Details

Name:	0000000B.00000000.494593836.000001C2A2DD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A2DD0000
Size:	102400

Details

Name:	00000007.00000003.482272636.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000017.00000003.644667475.000001A26EDD9000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDD9000
Size:	159744

Details

Name:	00000001.00000003.821225463.0000000000CA0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA0000
Size:	8192

Details

Name:	00000004.00000003.472088659.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000014.00000002.614627875.00000189CB6C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CB6C0000
Size:	4096

Details

Name:	00000005.00000002.881051416.000000007FC30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC30000
Size:	4096

Details

Name:	00000005.00000003.457419386.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000002.515914273.0000000002621000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2621000
Size:	24576

Details

Name:	00000010.00000002.576622610.00007FF509D59000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D59000
Size:	4096

Details

Name:	00000007.00000002.508885530.000000000267F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267F000
Size:	8192

Details

Name:	00000014.00000002.615190894.00007FF511923000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511923000
Size:	24576

Details

Name:	00000005.00000002.878457133.0000000002E11000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E11000
Size:	151552

Details

Name:	00000001.00000003.682300984.0000000000C8B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8B000
Size:	12288

Details

Name:	00000007.00000002.508668271.0000000002621000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2621000
Size:	24576

Details

Name:	00000004.00000003.461940526.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.492955545.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000018.00000002.645449643.000001AEC2047000.00000004.00000020.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1AEC2047000
Size:	65536

Details

Name:	00000017.00000000.631919691.00007DF5DA760000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA760000
Size:	4096

Details

Name:	0000000C.00000002.866870857.000002CD6FC22000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC22000
Size:	49152

Details

Name:	00000011.00000002.878716766.00007FF599BE8000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599BE8000
Size:	4096

Details

Name:	00000014.00000002.614571272.000000818957C000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	818957C000
Size:	16384

Details

Name:	00000005.00000002.881101619.000000007FC42000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC42000
Size:	4096

Details

Name:	00000017.00000003.659209357.000001A26E44A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E44A000
Size:	32768

Details

Name:	00000007.00000002.509089403.0000000004110000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4110000
Size:	733184

Details

Name:	00000011.00000002.877910859.0000017506D00000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17506D00000
Size:	4096

Details

Name:	00000007.00000003.479933705.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000001.00000003.487613755.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000B.00000002.506934273.00007FF5B8CA1000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8CA1000
Size:	20480

Details

Name:	00000001.00000002.880089856.000000007F510000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F510000
Size:	20480

Details

Name:	00000004.00000002.492016663.0000000002D15000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D15000
Size:	20480

Details

Name:	00000004.00000003.491563111.00000000035E7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E7000
Size:	4096

Details

Name:	00000005.00000003.485785750.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000002.878545965.0000000002E9B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9B000
Size:	16384

Details

Name:	0000000C.00000002.867244422.00007DF44C050000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF44C050000
Size:	20480

Details

Name:	00000004.00000002.492512440.00000000034CE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34CE000
Size:	8192

Details

Name:	00000001.00000002.879169183.0000000003E4E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3E4E000
Size:	8192

Details

Name:	00000004.00000002.492118438.0000000002DB2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DB2000
Size:	12288

Details

Name:	00000014.00000002.614770462.00000189CB902000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB902000
Size:	12288

Details

Name:	00000004.00000003.489449369.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000002.879179458.0000000003F4F000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F4F000
Size:	4096

Details

Name:	00000005.00000002.880931017.000000006F1A8000.00000040.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6F1A8000
Size:	8192

Details

Name:	00000005.00000002.878096658.00000000026BE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26BE000
Size:	12288

Details

Name:	0000000C.00000002.867268781.00007DF54E180000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E180000
Size:	4096

Details

Name:	0000000C.00000002.866814588.000002CD6F950000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6F950000
Size:	4096

Details

Name:	00000001.00000003.865542021.0000000000C42000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C42000
Size:	319488

Details

Name:	00000001.00000003.484381773.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000C.00000002.867551776.00007FF544057000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544057000
Size:	4096

Details

Name:	0000000C.00000002.868307364.00007FF5443A4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443A4000
Size:	8192

Details

Name:	00000005.00000003.476274750.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.679147725.0000000002E54000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E54000
Size:	262144

Details

Name:	0000000C.00000002.866511062.000002CD6A48A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A48A000
Size:	4096

Details

Name:	00000014.00000002.615223327.00007FF51193A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51193A000
Size:	24576

Details

Name:	00000014.00000002.615100960.00007FF511828000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511828000
Size:	4096

Details

Name:	00000014.00000002.614717137.00000189CB851000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB851000
Size:	106496

Details

Name:	00000004.00000003.490073931.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000002.508300638.00000000003A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3A0000
Size:	4096

Details

Name:	00000017.00000003.646682165.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	176128

Details

Name:	00000007.00000003.470824452.00000000006B2000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B2000
Size:	28672

Details

Name:	00000011.00000002.878257248.0000017507450000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17507450000
Size:	12288

Details

Name:	00000008.00000002.516086151.0000000002C10000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C10000
Size:	4096

Details

Name:	00000008.00000002.515734160.000000000082A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82A000
Size:	24576

Details

Name:	0000000C.00000003.597617107.000002CD6FD02000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FD02000
Size:	12288

Details

Name:	00000005.00000003.818414960.0000000002E9F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9F000
Size:	32768

Details

Name:	00000014.00000002.614755253.00000189CB88B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB88B000
Size:	24576

Details

Name:	00000005.00000002.881083444.000000007FC40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC40000
Size:	4096

Details

Name:	00000011.00000002.877954255.0000017506D70000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17506D70000
Size:	4096

Details

Name:	00000008.00000002.515768722.0000000000880000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	880000
Size:	4096

Details

Name:	00000005.00000002.879976031.000000000544E000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	544E000
Size:	8192

Details

Name:	0000000C.00000002.866303446.000002CD6A3F0000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CD6A3F0000
Size:	12288

Details

Name:	00000001.00000002.878285863.0000000000DAB000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DAB000
Size:	20480

Details

Name:	0000000C.00000002.866647598.000002CD6A502000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A502000
Size:	16384

Details

Name:	00000001.00000002.878189666.0000000000C43000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C43000
Size:	315392

Details

Name:	00000007.00000003.489775399.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000001.00000002.878861253.0000000002A0D000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2A0D000
Size:	12288

Details

Name:	00000017.00000002.659866416.000001A26E4E1000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4E1000
Size:	40960

Details

Name:	00000008.00000003.485317304.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000007.00000003.486926090.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000004.00000003.488465488.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000B.00000002.506715556.000001C2A3056000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3056000
Size:	57344

Details

Name:	00000004.00000002.492235780.0000000002FF0000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2FF0000
Size:	4096

Details

Name:	0000000C.00000002.866104934.000000EF42FF7000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF42FF7000
Size:	36864

Details

Name:	00000007.00000003.490511632.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000007.00000002.509061993.0000000002C30000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C30000
Size:	4096

Details

Name:	00000005.00000002.881066192.000000007FC32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC32000
Size:	4096

Details

Name:	00000004.00000003.456347474.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000018.00000003.644968314.000001AEC2060000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2060000
Size:	57344

Details

Name:	00000001.00000003.730323015.000000000333C000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333C000
Size:	4096

Details

Name:	00000007.00000003.480595578.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000001.00000003.867181820.0000000003690000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3690000
Size:	528384

Details

Name:	0000000C.00000003.528185008.000002CD6FCE6000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCE6000
Size:	4096

Details

Name:	00000005.00000003.478384543.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000010.00000002.575563202.0000028482A29000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A29000
Size:	73728

Details

Name:	00000008.00000002.515900933.00000000025DB000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25DB000
Size:	49152

Details

Name:	00000001.00000002.879605252.000000006F113000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F113000
Size:	4096

Details

Name:	00000014.00000000.602432604.00007FF511A17000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511A17000
Size:	16384

Details

Name:	00000018.00000002.645525301.000001AEC22D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC22D0000
Size:	36864

Details

Name:	00000011.00000002.878374468.0000017507B10000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17507B10000
Size:	4096

Details

Name:	00000008.00000002.516114107.0000000002C6E000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2C6E000
Size:	8192

Details

Name:	00000005.00000002.878350664.0000000002CE5000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CE5000
Size:	16384

Details

Name:	00000008.00000000.379026823.00000000007D0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	102400

Details

Name:	00000011.00000002.877685736.000000356015B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	356015B000
Size:	20480

Details

Name:	00000001.00000002.878747397.0000000002880000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2880000
Size:	4096

Details

Name:	00000005.00000002.879059510.00000000048B1000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	48B1000
Size:	45056

Details

Name:	00000008.00000002.515999718.0000000002672000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2672000
Size:	12288

Details

Name:	0000000C.00000002.866499361.000002CD6A47A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A47A000
Size:	4096

Details

Name:	00000005.00000003.478987298.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000002.867229303.000002CD6FD04000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FD04000
Size:	4096

Details

Name:	00000007.00000003.508029168.00000000006BC000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC000
Size:	4096

Details

Name:	00000014.00000002.615318219.00007FF5119D7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119D7000
Size:	12288

Details

Name:	00000017.00000002.660734311.00007FF5D07D5000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D07D5000
Size:	8192

Details

Name:	00000004.00000003.484854992.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.515802565.00000000024D3000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24D3000
Size:	12288

Details

Name:	00000017.00000002.659508643.000001A26E230000.00000004.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1A26E230000
Size:	4096

Details

Name:	00000001.00000002.879649817.000000006F120000.00000020.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6F120000
Size:	331776

Details

Name:	00000007.00000002.508415232.00000000006AD000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6AD000
Size:	12288

Details

Name:	00000001.00000002.878379567.0000000001060000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1060000
Size:	4096

Details

Name:	00000004.00000002.492688667.0000000004EBE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EBE000
Size:	8192

Details

Name:	00000005.00000003.772553663.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	282624

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000003.681906454.0000000000C0E000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C0E000
Size:	90112

Details

Name:	00000001.00000003.634733662.0000000004131000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4131000
Size:	868352

Details

Name:	00000005.00000002.880370733.000000006F110000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	00000004.00000002.492297125.000000000327B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	327B000
Size:	20480

Details

Name:	00000001.00000003.636593462.0000000002780000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2780000
Size:	524288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.483646630.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000017.00000002.659620671.000001A26E429000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E429000
Size:	73728

Details

Name:	00000014.00000002.614650237.00000189CB7E0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB7E0000
Size:	4096

Details

Name:	00000010.00000002.576185952.00007FF509BF6000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509BF6000
Size:	4096

Details

Name:	00000004.00000002.492241989.000000000307C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	307C000
Size:	12288

Details

Name:	00000001.00000003.822020726.0000000000C97000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.453567787.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000017.00000003.634605625.000001A26EAC0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EAC0000
Size:	4096

Details

Name:	0000000C.00000002.866238825.000002CD6A390000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2CD6A390000
Size:	4096

Details

Name:	00000010.00000002.576509164.00007FF509D46000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D46000
Size:	16384

Details

Name:	00000014.00000003.613923170.00000189CB84D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB84D000
Size:	4096

Details

Name:	00000007.00000002.509245737.000000007FB80000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FB80000
Size:	20480

Details

Name:	00000014.00000002.614789907.00000189CB913000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB913000
Size:	12288

Details

Name:	00000004.00000003.455342661.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000002.877813250.00000000008DC000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8DC000
Size:	8192

Details

Name:	00000014.00000002.614822082.00000189CBD80000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CBD80000
Size:	4096

Details

Name:	00000007.00000003.508008718.00000000006A9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6A9000
Size:	28672

Details

Name:	00000007.00000003.486590202.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000007.00000003.481605503.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	0000000B.00000002.506613637.000001C2A2DC0000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C2A2DC0000
Size:	4096

Details

Name:	00000011.00000002.878705325.00007FF599BE1000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599BE1000
Size:	16384

Details

Name:	00000001.00000003.541248797.0000000000C3C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	4096

Details

Name:	00000017.00000003.659163120.000001A26E458000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E458000
Size:	40960

Details

Name:	00000010.00000000.559718967.00007DF513BC0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BC0000
Size:	12288

Details

Name:	00000005.00000003.474063999.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.533416489.000000000544B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544B000
Size:	4096

Details

Name:	00000017.00000003.648891161.000001A26ED9D000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9D000
Size:	8192

Details

Name:	00000001.00000002.879128650.0000000003CCA000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CCA000
Size:	24576

Details

Name:	00000001.00000003.480666552.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000004.00000003.491568890.00000000035D6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D6000
Size:	65536

Details

Name:	0000000C.00000002.866801695.000002CD6AC15000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AC15000
Size:	4096

Details

Name:	00000004.00000003.463255573.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.575803031.0000028483050000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28483050000
Size:	4096

Details

Name:	0000000C.00000002.868337395.00007FF5443BA000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443BA000
Size:	12288

Details

Name:	00000001.00000003.587757729.0000000000C88000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C88000
Size:	4096

Details

Name:	00000007.00000003.479590987.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000010.00000002.575854766.00007DF513BA0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BA0000
Size:	4096

Details

Name:	00000005.00000002.880066201.000000000589F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	589F000
Size:	4096

Details

Name:	00000007.00000000.364115222.0000000000240000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	240000
Size:	102400

Details

Name:	0000000C.00000002.866248658.000002CD6A3A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A3A0000
Size:	102400

Details

Name:	00000007.00000002.508719365.0000000002656000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2656000
Size:	16384

Details

Name:	00000011.00000002.878183098.0000017507020000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17507020000
Size:	4096

Details

Name:	00000005.00000003.577113344.0000000002E27000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E27000
Size:	61440

Details

Name:	00000008.00000003.515496812.0000000004690000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4690000
Size:	8192

Details

Name:	00000001.00000003.681888345.0000000000C8B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8B000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000000.517736003.00007DF54E1A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E1A0000
Size:	12288

Details

Name:	0000000B.00000002.507066125.00007FF5B906E000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B906E000
Size:	4096

Details

Name:	00000005.00000003.726312780.0000000002E98000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E98000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.506710452.000001C2A304F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A304F000
Size:	8192

Details

Name:	00000008.00000003.481279999.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000014.00000002.615141756.00007FF511895000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511895000
Size:	12288

Details

Name:	00000001.00000003.682244029.0000000000CAE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAE000
Size:	4096

Details

Name:	00000001.00000003.541267310.0000000000C43000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C43000
Size:	274432

Details

Name:	00000011.00000002.878446347.00007DF5A3B52000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B52000
Size:	4096

Details

Name:	00000008.00000002.516842778.0000000004770000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4770000
Size:	12288

Details

Name:	00000017.00000002.660469923.00007FF5D037F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D037F000
Size:	4096

Details

Name:	00000008.00000003.486891657.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000018.00000002.645871755.00007FF586917000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586917000
Size:	16384

Details

Name:	00000008.00000003.483040080.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	0000000C.00000003.865945658.000002CD6A4A9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A4A9000
Size:	69632

Details

Name:	00000007.00000003.478385243.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000017.00000003.634478802.000001A26E4A8000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4A8000
Size:	24576

Details

Name:	00000001.00000003.867908983.0000000000C3F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3F000
Size:	331776

Details

Name:	00000018.00000002.645230345.000000ACEA5F9000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACEA5F9000
Size:	28672

Details

Name:	00000004.00000003.490174438.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000000.559762487.00007FF509E07000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509E07000
Size:	16384

Details

Name:	00000005.00000003.863746046.0000000005ADA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ADA000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.660698617.00007FF5D0797000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0797000
Size:	4096

Details

Name:	0000000C.00000002.866537511.000002CD6A48F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A48F000
Size:	8192

Details

Name:	00000005.00000003.769867958.0000000002E9F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9F000
Size:	32768

Details

Name:	00000001.00000003.865523337.0000000000C3F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3F000
Size:	4096

Details

Name:	0000000C.00000003.519058644.000002CD6FBB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FBB0000
Size:	4096

Details

Name:	00000017.00000003.648265322.000001A26EDB5000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDB5000
Size:	61440

Details

Name:	00000005.00000002.878498824.0000000002E37000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E37000
Size:	405504

Details

Name:	00000005.00000003.532665201.0000000002E4C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E4C000
Size:	16384

Details

Name:	00000007.00000002.508330300.00000000003D0000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3D0000
Size:	4096

Details

Name:	00000005.00000003.475975571.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000010.00000002.575472003.00000284829C0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	284829C0000
Size:	4096

Details

Name:	00000007.00000002.508315485.00000000003C7000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3C7000
Size:	12288

Details

Name:	0000000C.00000002.866185054.000000EF4357B000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF4357B000
Size:	20480

Details

Name:	00000004.00000003.450754742.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.515867358.00000000025CA000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25CA000
Size:	8192

Details

Name:	00000008.00000002.515794327.00000000024A5000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24A5000
Size:	28672

Details

Name:	00000008.00000003.515556792.0000000002CD6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6000
Size:	4096

Details

Name:	0000000B.00000000.494643933.00007DF5C2FB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2FB0000
Size:	12288

Details

Name:	00000004.00000003.486098383.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000002.878413186.00000000011E0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11E0000
Size:	69632

Details

Name:	00000018.00000002.645600753.00007DF5906C2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906C2000
Size:	4096

Details

Name:	00000014.00000002.614518960.0000008188DAE000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8188DAE000
Size:	8192

Details

Name:	00000017.00000002.660627253.00007FF5D070B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D070B000
Size:	4096

Details

Name:	00000017.00000003.644808509.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	212992

Details

Name:	00000014.00000002.615021735.00007FF5117D7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5117D7000
Size:	8192

Details

Name:	00000001.00000003.536884549.0000000003E10000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E10000
Size:	4096

Details

Name:	00000017.00000002.659786491.000001A26E4A9000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4A9000
Size:	32768

Details

Name:	00000007.00000002.508276766.0000000000350000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	350000
Size:	4096

Details

Name:	0000000C.00000002.866376166.000002CD6A425000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A425000
Size:	12288

Details

Name:	00000017.00000003.659233672.000001A26E448000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E448000
Size:	4096

Details

Name:	00000005.00000003.632325766.0000000002E52000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E52000
Size:	4096

Details

Name:	00000004.00000003.468136193.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000002.492090237.0000000002DA3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA3000
Size:	16384

Details

Name:	00000005.00000002.877738268.00000000024D3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24D3000
Size:	4096

Details

Name:	00000001.00000002.878836865.000000000298E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	298E000
Size:	8192

Details

Name:	00000005.00000003.633415849.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	765952

Details

Name:	0000000C.00000002.866207848.000000EF43A7A000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF43A7A000
Size:	24576

Details

Name:	00000005.00000003.587666227.0000000002E37000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E37000
Size:	106496

Details

Name:	00000005.00000003.454974284.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.634778546.0000000002E96000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E96000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.615285583.00007FF5119C4000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119C4000
Size:	8192

Details

Name:	0000000C.00000002.867731569.00007FF544120000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544120000
Size:	4096

Details

Name:	00000004.00000003.461237511.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.660715195.00007FF5D07B6000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D07B6000
Size:	4096

Details

Name:	00000017.00000003.634751535.000001A26E4ED000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4ED000
Size:	32768

Details

Name:	00000014.00000002.614869403.00007DF51B7C2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7C2000
Size:	4096

Details

Name:	0000000C.00000002.866162203.000000EF4337F000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF4337F000
Size:	4096

Details

Name:	00000011.00000002.878817757.00007FF599CF9000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599CF9000
Size:	4096

Details

Name:	00000007.00000002.508806666.0000000002672000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2672000
Size:	12288

Details

Name:	00000017.00000002.660515829.00007FF5D0477000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0477000
Size:	32768

Details

Name:	00000011.00000002.878759673.00007FF599CC6000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599CC6000
Size:	12288

Details

Name:	0000000C.00000003.861691483.000002CD6FEE0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FEE0000
Size:	4096

Details

Name:	00000005.00000002.880026579.000000000581F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	581F000
Size:	4096

Details

Name:	00000007.00000002.509275213.000000007FC90000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC90000
Size:	4096

Details

Name:	00000017.00000003.641431341.000001A26ED55000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED55000
Size:	86016

Details

Name:	00000007.00000002.508208764.0000000000240000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	240000
Size:	102400

Details

Name:	00000004.00000002.492332052.00000000032D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32D0000
Size:	4096

Details

Name:	00000001.00000003.489776253.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000001.00000003.539453327.0000000000C43000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C43000
Size:	16384

Details

Name:	00000005.00000003.723937978.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Details

Name:	0000000C.00000003.528175594.000002CD6FCC7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCC7000
Size:	4096

Details

Name:	00000004.00000003.489206438.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000011.00000002.878437955.00007DF5A3B50000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B50000
Size:	4096

Details

Name:	00000018.00000002.645581307.00007DF5906B0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906B0000
Size:	4096

Details

Name:	00000014.00000002.614763785.00000189CB900000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB900000
Size:	4096

Details

Name:	00000005.00000003.680286695.000000000544B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544B000
Size:	4096

Details

Name:	00000018.00000002.645392985.000001AEC2000000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2000000
Size:	4096

Details

Name:	00000004.00000002.492099761.0000000002DA8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA8000
Size:	20480

Details

Name:	00000005.00000003.818407132.0000000005A8C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A8C000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.451659207.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.866943216.000002CD6FC50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC50000
Size:	69632

Details

Name:	00000001.00000003.486959100.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000C.00000002.866600440.000002CD6A4AC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A4AC000
Size:	57344

Details

Name:	00000005.00000002.881016566.000000007FB30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FB30000
Size:	20480

Details

Name:	00000005.00000003.532163323.0000000002E4B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E4B000
Size:	20480

Details

Name:	00000007.00000002.509069497.000000000408E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	408E000
Size:	8192

Details

Name:	00000005.00000002.880386847.000000006F111000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6F111000
Size:	8192

Details

Name:	00000011.00000002.878868036.00007FF599D5D000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D5D000
Size:	12288

Details

Name:	00000008.00000000.379054505.000000007F9E0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9E0000
Size:	4096

Details

Name:	00000004.00000003.481642495.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.575392552.000000CC4CB7F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4CB7F000
Size:	4096

Details

Name:	00000008.00000002.515845529.00000000025AF000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25AF000
Size:	32768

Details

Name:	00000001.00000003.774960987.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	1085440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000000.562310674.00007DF5A3B52000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B52000
Size:	4096

Details

Name:	00000007.00000002.508283514.0000000000370000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	370000
Size:	16384

Details

Name:	00000008.00000003.481602599.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000007.00000002.508342853.0000000000520000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	520000
Size:	12288

Details

Name:	00000005.00000003.482738023.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000018.00000002.645289549.000001AEC1ED0000.00000004.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1AEC1ED0000
Size:	4096

Details

Name:	0000000C.00000003.529151847.000002CD6AD59000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD59000
Size:	4096

Details

Name:	00000014.00000002.614954333.00007FF5114C1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5114C1000
Size:	20480

Details

Name:	00000017.00000002.660014397.000001A26EA60000.00000008.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1A26EA60000
Size:	266240

Details

Name:	0000000C.00000002.867856347.00007FF544221000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544221000
Size:	16384

Details

Name:	00000014.00000002.615336928.00007FF5119EA000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119EA000
Size:	12288

Details

Name:	00000008.00000002.517119321.000000007F8D0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F8D0000
Size:	20480

Details

Name:	00000017.00000003.645106563.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	425984

Details

Name:	0000000B.00000002.507045676.00007FF5B9008000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9008000
Size:	4096

Details

Name:	00000017.00000003.639600426.000001A26F221000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F221000
Size:	118784

Details

Name:	00000001.00000002.878474926.0000000001370000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1370000
Size:	360448

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000B.00000002.506766586.000001C2A3102000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3102000
Size:	12288

Details

Name:	00000005.00000002.878218198.000000000298C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	298C000
Size:	16384

Details

Name:	00000008.00000003.515484809.0000000004C38000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4C38000
Size:	4096

Details

Name:	00000017.00000002.660413535.00007FF5D0255000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0255000
Size:	12288

Details

Name:	00000018.00000002.645757362.00007FF5868C4000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868C4000
Size:	4096

Details

Name:	00000005.00000003.579313831.0000000002E9C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9C000
Size:	122880

Details

Name:	00000001.00000003.478879487.0000000001010000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000007.00000003.476883707.00000000041F0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	41F0000
Size:	4096

Details

Name:	00000004.00000003.449214561.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000018.00000003.644981233.000001AEC2057000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2057000
Size:	32768

Details

Name:	00000018.00000002.645787316.00007FF5868CD000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868CD000
Size:	12288

Details

Name:	0000000B.00000002.506592526.00000074D0B7E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D0B7E000
Size:	8192

Details

Name:	00000007.00000003.478686556.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000018.00000002.645860627.00007FF586906000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586906000
Size:	16384

Details

Name:	0000000C.00000003.518272700.000002CD6FA74000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA74000
Size:	4096

Details

Name:	00000017.00000003.641444545.000001A26EDBE000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDBE000
Size:	147456

Details

Name:	00000001.00000003.539465952.0000000000C48000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C48000
Size:	229376

Details

Name:	00000008.00000002.516137388.0000000002CA0000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CA0000
Size:	32768

Details

Name:	00000001.00000002.877749299.00000000006BC000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC000
Size:	16384

Details

Name:	00000004.00000003.480365430.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000011.00000002.877995609.0000017506D98000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17506D98000
Size:	32768

Details

Name:	00000007.00000003.478083612.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000017.00000003.644451945.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	176128

Details

Name:	00000004.00000003.480665904.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.516946112.0000000004CCD000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4CCD000
Size:	12288

Details

Name:	00000005.00000002.877936175.0000000002612000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2612000
Size:	4096

Details

Name:	00000017.00000002.660285259.000001A26F200000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F200000
Size:	8192

Details

Name:	00000010.00000002.576750640.00007FF509DB7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DB7000
Size:	20480

Details

Name:	00000004.00000003.458457845.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000003.490677934.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.680274794.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Details

Name:	00000007.00000002.508364904.000000000067E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	67E000
Size:	8192

Details

Name:	00000018.00000002.645499931.000001AEC2160000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC2160000
Size:	16384

Details

Name:	0000000C.00000003.528118765.000002CD6FCBE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCBE000
Size:	32768

Details

Name:	0000000C.00000002.866486803.000002CD6A477000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A477000
Size:	8192

Details

Name:	00000008.00000003.486356109.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000001.00000002.877880600.0000000000A80000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A80000
Size:	16384

Details

Name:	00000017.00000002.660616352.00007FF5D0700000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0700000
Size:	4096

Details

Name:	00000004.00000003.453768914.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000003.518305165.000002CD6FBA0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FBA0000
Size:	4096

Details

Name:	00000017.00000003.645356797.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	851968

Details

Name:	00000005.00000002.879907049.0000000004FFF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FFF000
Size:	4096

Details

Name:	00000005.00000002.878061701.00000000026A6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A6000
Size:	16384

Details

Name:	00000017.00000002.660635916.00007FF5D0724000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0724000
Size:	4096

Details

Name:	0000000C.00000002.866827598.000002CD6FC00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC00000
Size:	57344

Details

Name:	00000007.00000002.508200564.0000000000230000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	230000
Size:	4096

Details

Name:	00000005.00000003.632138391.0000000002E11000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E11000
Size:	151552

Details

Name:	00000004.00000003.489776825.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000000.559668628.0000028482990000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	28482990000
Size:	102400

Details

Name:	00000010.00000002.575345901.000000CC4C7FB000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4C7FB000
Size:	20480

Details

Name:	00000001.00000003.478499216.0000000001010000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000017.00000002.661144332.00007FF5D09C2000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D09C2000
Size:	12288

Details

Name:	00000001.00000002.879624127.000000006F116000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F116000
Size:	40960

Details

Name:	00000014.00000002.615205762.00007FF51192D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51192D000
Size:	20480

Details

Name:	00000017.00000002.660588883.00007FF5D069F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D069F000
Size:	4096

Details

Name:	00000001.00000003.776180461.00000000041BE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	41BE000
Size:	299008

Details

Name:	00000017.00000002.660683166.00007FF5D0787000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0787000
Size:	8192

Details

Name:	00000008.00000003.485451863.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	00000001.00000002.877803369.00000000007D0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	4096

Details

Name:	00000004.00000003.470548733.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000002.492062115.0000000002D8D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8D000
Size:	32768

Details

Name:	00000018.00000002.645594945.00007DF5906C0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906C0000
Size:	4096

Details

Name:	00000005.00000003.481130448.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000002.516209086.0000000002CD8000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CD8000
Size:	90112

Details

Name:	00000005.00000002.877873978.00000000025D7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D7000
Size:	12288

Details

Name:	00000007.00000003.507891030.0000000004260000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4260000
Size:	4096

Details

Name:	0000000B.00000002.506634061.000001C2A2DF0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A2DF0000
Size:	12288

Details

Name:	00000018.00000002.645841883.00007FF586903000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586903000
Size:	8192

Details

Name:	00000008.00000000.379056749.000000007F9E2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9E2000
Size:	4096

Details

Name:	0000000B.00000002.507308451.00007FF5B91A4000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91A4000
Size:	8192

Details

Name:	00000004.00000003.472389950.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.867602070.00007FF5440A8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440A8000
Size:	4096

Details

Name:	00000014.00000002.615370105.00007FF511A12000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511A12000
Size:	12288

Details

Name:	00000001.00000003.867553987.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	393216

Details

Name:	00000004.00000003.488783499.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.660487910.00007FF5D0443000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0443000
Size:	8192

Details

Name:	00000014.00000002.615163627.00007FF511911000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511911000
Size:	8192

Details

Name:	0000000C.00000003.865841405.000002CD6ABF0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6ABF0000
Size:	4096

Details

Name:	00000005.00000002.877852711.0000000002527000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2527000
Size:	16384

Details

Name:	00000005.00000003.453869279.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000002.878256685.00000000029D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D0000
Size:	16384

Details

Name:	00000014.00000002.615234972.00007FF511942000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511942000
Size:	49152

Details

Name:	00000005.00000002.880846556.000000006F19D000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F19D000
Size:	4096

Details

Name:	00000001.00000003.539495776.0000000000C48000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C48000
Size:	229376

Details

Name:	0000000C.00000002.867611345.00007FF5440B5000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440B5000
Size:	8192

Details

Name:	00000018.00000002.645652203.00007FF5860EB000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5860EB000
Size:	8192

Details

Name:	00000010.00000002.576278494.00007FF509C85000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509C85000
Size:	12288

Details

Name:	00000007.00000003.483042206.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000004.00000002.492309794.00000000032BB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32BB000
Size:	20480

Details

Name:	00000005.00000002.880049197.000000000585E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	585E000
Size:	8192

Details

Name:	00000017.00000003.644935037.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	425984

Details

Name:	00000017.00000002.659518482.000001A26E240000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1A26E240000
Size:	4096

Details

Name:	00000005.00000002.879918335.0000000005050000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5050000
Size:	4096

Details

Name:	0000000C.00000002.867883489.00007FF544251000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544251000
Size:	4096

Details

Name:	00000007.00000002.508530492.00000000024D3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24D3000
Size:	12288

Details

Name:	00000007.00000003.470835760.00000000006AE000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6AE000
Size:	8192

Details

Name:	00000014.00000003.613969389.00000189CB84A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB84A000
Size:	4096

Details

Name:	00000001.00000002.878350383.0000000000FC0000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FC0000
Size:	4096

Details

Name:	00000007.00000002.508687150.0000000002638000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2638000
Size:	45056

Details

Name:	00000004.00000003.448611178.0000000005050000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5050000
Size:	4096

Details

Name:	00000001.00000002.878006802.0000000000BB0000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BB0000
Size:	36864

Details

Name:	00000010.00000002.576158852.00007FF509BD7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509BD7000
Size:	4096

Details

Name:	00000014.00000002.615077233.00007FF511820000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511820000
Size:	4096

Details

Name:	00000005.00000003.460734873.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000003.459830972.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.866092266.000000EF42BEC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EF42BEC000
Size:	16384

Details

Name:	00000005.00000003.679074688.0000000002E9D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9D000
Size:	4096

Details

Name:	00000005.00000000.353919072.000000007FC50000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC50000
Size:	12288

Details

Name:	0000000C.00000002.867831121.00007FF5441A3000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5441A3000
Size:	4096

Details

Name:	00000008.00000002.517096707.0000000006DD8000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6DD8000
Size:	12288

Details

Name:	00000017.00000000.632020540.00007FF5D09C7000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D09C7000
Size:	16384

Details

Name:	00000004.00000003.469342297.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.481318055.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.508506345.0000000002479000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2479000
Size:	8192

Details

Name:	00000017.00000000.631941849.00007DF5DA772000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA772000
Size:	4096

Details

Name:	0000000B.00000002.506728070.000001C2A3065000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3065000
Size:	40960

Details

Name:	0000000C.00000003.518323666.000002CD6FA80000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA80000
Size:	8192

Details

Name:	00000007.00000003.492521519.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	0000000C.00000002.866452347.000002CD6A456000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A456000
Size:	77824

Details

Name:	00000004.00000003.491521417.00000000035D1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D1000
Size:	12288

Details

Name:	00000001.00000002.878309905.0000000000DB0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DB0000
Size:	36864

Details

Name:	00000001.00000003.821252146.0000000000C3C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	339968

Details

Name:	00000005.00000003.455275675.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.587771226.0000000000C3C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	4096

Details

Name:	00000011.00000000.562303778.00007DF5A3B50000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B50000
Size:	4096

Details

Name:	00000008.00000002.516021775.000000000268D000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	268D000
Size:	36864

Details

Name:	0000000B.00000000.494614730.00007DF5C2F90000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2F90000
Size:	4096

Details

Name:	00000001.00000003.730291682.0000000000C9D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9D000
Size:	8192

Details

Name:	00000010.00000002.575378725.000000CC4CA77000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4CA77000
Size:	36864

Details

Name:	00000005.00000000.353777509.000000007FC40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC40000
Size:	4096

Details

Name:	00000008.00000002.516866505.0000000004830000.00000004.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4830000
Size:	4096

Details

Name:	00000005.00000003.679084770.0000000002DFE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DFE000
Size:	45056

Details

Name:	00000005.00000003.864565453.0000000002E9A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9A000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.486458214.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.868174883.00007FF54432D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54432D000
Size:	20480

Details

Name:	00000017.00000003.641385420.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	73728

Details

Name:	0000000B.00000002.507023466.00007FF5B8FC7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8FC7000
Size:	4096

Details

Name:	00000007.00000003.492720889.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000002.878272708.00000000029E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29E0000
Size:	4096

Details

Name:	00000017.00000002.661097761.00007FF5D0987000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0987000
Size:	32768

Details

Name:	00000001.00000003.589565062.0000000004131000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4131000
Size:	684032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.491580888.00000000035E7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E7000
Size:	4096

Details

Name:	00000011.00000002.878774905.00007FF599CE6000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599CE6000
Size:	16384

Details

Name:	00000017.00000003.634743008.000001A26E4EA000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4EA000
Size:	4096

Details

Name:	0000000C.00000003.865784464.000002CD6FB70000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB70000
Size:	4096

Details

Name:	00000005.00000003.863582903.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	946176

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.660155186.000001A26ED4A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED4A000
Size:	69632

Details

Name:	00000004.00000003.483946008.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000014.00000002.614839272.00007DF419680000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF419680000
Size:	20480

Details

Name:	00000010.00000002.576221017.00007FF509C15000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509C15000
Size:	8192

Details

Name:	0000000B.00000000.494620625.00007DF5C2F92000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2F92000
Size:	4096

Details

Name:	00000017.00000002.659796982.000001A26E4B2000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4B2000
Size:	36864

Details

Name:	00000007.00000001.370746843.000000006F110000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	00000005.00000003.577039102.0000000002E94000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E94000
Size:	28672

Details

Name:	00000007.00000003.487606526.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000017.00000002.661108021.00007FF5D099A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D099A000
Size:	12288

Details

Name:	00000017.00000002.661016217.00007FF5D0974000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0974000
Size:	8192

Details

Name:	00000004.00000002.492628666.00000000035E7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35E7000
Size:	4096

Details

Name:	00000017.00000002.659604679.000001A26E413000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E413000
Size:	86016

Details

Name:	00000001.00000002.878393962.0000000001090000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1090000
Size:	8192

Details

Name:	00000008.00000002.516311207.000000000457E000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	457E000
Size:	8192

Details

Name:	00000010.00000002.576357910.00007FF509D13000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D13000
Size:	24576

Details

Name:	00000017.00000003.640551728.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	94208

Details

Name:	00000017.00000003.640506037.000001A26EDAF000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDAF000
Size:	90112

Details

Name:	00000007.00000003.481199263.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000010.00000002.576523878.00007FF509D4D000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D4D000
Size:	20480

Details

Name:	00000005.00000002.878343345.0000000002CE0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CE0000
Size:	16384

Details

Name:	00000005.00000003.864375784.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	282624

Details

Name:	0000000C.00000002.866390581.000002CD6A429000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A429000
Size:	77824

Details

Name:	00000011.00000002.878428920.00007DF5A3B42000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B42000
Size:	4096

Details

Name:	00000017.00000003.648221722.000001A26EDC4000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDC4000
Size:	61440

Details

Name:	0000000B.00000002.506571033.00000074D087B000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D087B000
Size:	20480

Details

Name:	00000017.00000003.648256912.000001A26EDA4000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDA4000
Size:	32768

Details

Name:	00000001.00000002.878457832.0000000001360000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1360000
Size:	4096

Details

Name:	00000005.00000003.578643088.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	892928

Details

Name:	00000018.00000002.645719427.00007FF586856000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586856000
Size:	16384

Details

Name:	0000000B.00000002.507317370.00007FF5B91A7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91A7000
Size:	20480

Details

Name:	00000011.00000002.878909514.00007FF599D6B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D6B000
Size:	16384

Details

Name:	00000001.00000002.877863932.0000000000A7C000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A7C000
Size:	16384

Details

Name:	00000005.00000002.878380201.0000000002DCA000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2DCA000
Size:	270336

Details

Name:	00000001.00000003.730001124.00000000042D6000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42D6000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.659488374.0000001607DFE000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607DFE000
Size:	8192

Details

Name:	0000000B.00000000.494724969.00007FF5B91F7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91F7000
Size:	16384

Details

Name:	00000007.00000003.484325998.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000004.00000003.482773987.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.516201184.0000000002CD6000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CD6000
Size:	4096

Details

Name:	00000017.00000003.636921461.000001A26ED88000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED88000
Size:	32768

Details

Name:	00000005.00000003.863932568.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	331776

Details

Name:	00000007.00000002.508350014.0000000000524000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	4096

Details

Name:	00000004.00000003.451056521.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.516071991.0000000002A00000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A00000
Size:	12288

Details

Name:	00000017.00000002.660796833.00007FF5D0888000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0888000
Size:	4096

Details

Name:	00000017.00000002.660824135.00007FF5D08A9000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08A9000
Size:	16384

Details

Name:	0000000C.00000002.867769909.00007FF544187000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544187000
Size:	8192

Details

Name:	0000000C.00000002.866318262.000002CD6A400000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A400000
Size:	73728

Details

Name:	00000005.00000003.864444999.00000000059C6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59C6000
Size:	278528

Details

Name:	0000000C.00000003.865642604.000002CD6F930000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6F930000
Size:	4096

Details

Name:	00000001.00000002.879148503.0000000003D0E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3D0E000
Size:	8192

Details

Name:	0000000C.00000002.867909400.00007FF544265000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544265000
Size:	12288

Details

Name:	00000005.00000003.477178689.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000002.880867784.000000006F19E000.00000008.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	6F19E000
Size:	28672

Details

Name:	00000004.00000002.492107321.0000000002DAE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAE000
Size:	12288

Details

Name:	00000001.00000003.868075817.0000000002780000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2780000
Size:	532480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000003.648824688.000001A26ED89000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED89000
Size:	36864

Details

Name:	0000000B.00000002.507174312.00007FF5B911A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B911A000
Size:	24576

Details

Name:	00000014.00000002.615066527.00007FF511806000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511806000
Size:	4096

Details

Name:	00000017.00000003.636935971.000001A26ED99000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED99000
Size:	106496

Details

Name:	00000001.00000003.589781568.000000000333C000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333C000
Size:	4096

Details

Name:	00000011.00000002.878892515.00007FF599D67000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D67000
Size:	12288

Details

Name:	00000001.00000003.681897249.0000000000C97000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	12288

Details

Name:	00000008.00000002.516241846.0000000002FA0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FA0000
Size:	69632

Details

Name:	00000001.00000003.821966208.0000000000C42000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C42000
Size:	315392

Details

Name:	00000017.00000002.659937550.000001A26E508000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E508000
Size:	28672

Details

Name:	0000000B.00000002.506638889.000001C2A2E00000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A2E00000
Size:	4096

Details

Name:	00000007.00000002.509290757.000000007FCA0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCA0000
Size:	12288

Details

Name:	00000018.00000000.633486015.00007DF5906C2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906C2000
Size:	4096

Details

Name:	00000004.00000002.493022743.0000000006CB0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6CB0000
Size:	8192

Details

Name:	00000011.00000002.877797237.0000017506BC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17506BC0000
Size:	102400

Details

Name:	0000000B.00000002.506585528.00000074D0A77000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D0A77000
Size:	36864

Details

Name:	00000007.00000003.488432192.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000004.00000003.466294659.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.536894931.0000000003E10000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E10000
Size:	4096

Details

Name:	00000010.00000002.576301831.00007FF509CFF000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509CFF000
Size:	4096

Details

Name:	00000001.00000003.730299758.0000000000CA0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA0000
Size:	61440

Details

Name:	0000000B.00000002.507395814.00007FF5B91CA000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91CA000
Size:	12288

Details

Name:	00000011.00000002.877894484.0000017506CE0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17506CE0000
Size:	8192

Details

Name:	00000007.00000003.480914854.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000005.00000000.353820728.000000007FC42000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC42000
Size:	4096

Details

Name:	0000000B.00000002.507017119.00007FF5B8FB7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8FB7000
Size:	8192

Details

Name:	00000007.00000003.486224847.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.532157348.0000000002E94000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E94000
Size:	8192

Details

Name:	0000000C.00000002.867313314.00007DF54E192000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E192000
Size:	4096

Details

Name:	00000005.00000002.878104184.00000000026C2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26C2000
Size:	12288

Details

Name:	00000004.00000003.462844973.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.661072156.00007FF5D0984000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0984000
Size:	8192

Details

Name:	00000008.00000002.516718119.00000000046B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	46B0000
Size:	733184

Details

Name:	00000001.00000002.879795997.000000006F171000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F171000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000C.00000002.867405090.00007FF543BAF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543BAF000
Size:	12288

Details

Name:	00000007.00000002.508446565.00000000006B1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6B1000
Size:	32768

Details

Name:	0000000C.00000002.868117913.00007FF544306000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544306000
Size:	12288

Details

Name:	00000001.00000002.877935443.0000000000AAC000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AAC000
Size:	4096

Details

Name:	00000004.00000003.465089404.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000002.509202723.000000000424E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	424E000
Size:	8192

Details

Name:	0000000C.00000002.867300720.00007DF54E190000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E190000
Size:	4096

Details

Name:	00000004.00000003.489304771.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000003.491883703.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000008.00000002.517107252.0000000006DF0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6DF0000
Size:	4096

Details

Name:	00000008.00000002.517031337.0000000006573000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6573000
Size:	8192

Details

Name:	00000005.00000003.769905936.0000000002E9B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9B000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.507241089.00007FF5B913D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B913D000
Size:	20480

Details

Name:	00000017.00000003.641467541.000001A26ED89000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED89000
Size:	36864

Details

Name:	00000001.00000003.636468489.00000000042CA000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42CA000
Size:	520192

Details

Name:	00000014.00000002.614854452.00007DF51B7B2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7B2000
Size:	4096

Details

Name:	0000000B.00000002.507290489.00007FF5B9149000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9149000
Size:	4096

Details

Name:	00000010.00000002.576137708.00007FF509BC7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509BC7000
Size:	8192

Details

Name:	00000001.00000003.488432561.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.509215552.0000000005DC0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DC0000
Size:	4096

Details

Name:	00000007.00000002.509083239.000000000410E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	410E000
Size:	8192

Details

Name:	00000001.00000002.877686803.0000000000650000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	650000
Size:	4096

Details

Name:	00000005.00000002.879037471.00000000048AB000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	48AB000
Size:	20480

Details

Name:	00000001.00000003.821214580.0000000000C9D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9D000
Size:	4096

Details

Name:	00000005.00000002.878738142.0000000003380000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3380000
Size:	360448

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000014.00000002.615292082.00007FF5119C7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119C7000
Size:	20480

Details

Name:	00000004.00000003.456783077.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.878111984.00000000026CC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26CC000
Size:	20480

Details

Name:	00000001.00000002.879026338.000000000388F000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	388F000
Size:	4096

Details

Name:	00000017.00000002.659756289.000001A26E488000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E488000
Size:	122880

Details

Name:	00000005.00000003.475002481.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000014.00000002.614847797.00007DF51B7B0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7B0000
Size:	4096

Details

Name:	00000008.00000002.516194259.0000000002CD2000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CD2000
Size:	12288

Details

Name:	00000005.00000003.454371478.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000002.868084657.00007FF5442F3000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442F3000
Size:	24576

Details

Name:	00000004.00000002.493077648.000000007F5C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5C0000
Size:	12288

Details

Name:	00000005.00000002.878129567.00000000026DD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26DD000
Size:	36864

Details

Name:	00000008.00000002.515824385.000000000259E000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	259E000
Size:	28672

Details

Name:	00000005.00000003.485250120.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.490175211.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000001.00000003.492320114.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000005.00000002.878006003.0000000002671000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2671000
Size:	24576

Details

Name:	00000004.00000002.492247336.0000000003080000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000001.00000003.729798432.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	1019904

Details

Name:	00000004.00000002.492266764.0000000003220000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3220000
Size:	102400

Details

Name:	00000011.00000000.562288161.00007DF5A3B42000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B42000
Size:	4096

Details

Name:	00000011.00000003.589227933.0000017507B70000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17507B70000
Size:	20480

Details

Name:	00000005.00000003.532547662.0000000002E94000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E94000
Size:	4096

Details

Name:	00000007.00000002.509233320.0000000006260000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6260000
Size:	4096

Details

Name:	00000004.00000002.492022909.0000000002D1B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D1B000
Size:	49152

Details

Name:	00000004.00000003.491601316.00000000035D5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D5000
Size:	4096

Details

Name:	0000000C.00000003.865853257.000002CD6B360000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6B360000
Size:	4096

Details

Name:	00000014.00000002.614674565.00000189CB813000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB813000
Size:	86016

Details

Name:	00000005.00000003.632066405.0000000002E96000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E96000
Size:	32768

Details

Name:	00000004.00000003.472992782.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000003.468677592.00000000003E0000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3E0000
Size:	4096

Details

Name:	0000000C.00000002.866129323.000000EF43179000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF43179000
Size:	28672

Details

Name:	00000005.00000003.533124216.0000000002E51000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E51000
Size:	4096

Details

Name:	00000001.00000003.868033428.0000000000C97000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.509076552.00000000040CE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	40CE000
Size:	8192

Details

Name:	0000000B.00000002.507001341.00007FF5B8E61000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8E61000
Size:	8192

Details

Name:	00000008.00000002.517134965.000000007F9D2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9D2000
Size:	4096

Details

Name:	00000005.00000003.475604752.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000007.00000002.508591019.00000000025A7000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A7000
Size:	4096

Details

Name:	00000004.00000002.492709812.0000000004F7F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F7F000
Size:	4096

Details

Name:	0000000C.00000002.868142412.00007FF544312000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544312000
Size:	49152

Details

Name:	00000014.00000002.615327678.00007FF5119DB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119DB000
Size:	16384

Details

Name:	00000007.00000002.508487541.000000000088E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	88E000
Size:	8192

Details

Name:	00000007.00000000.367299361.000000007FC80000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC80000
Size:	4096

Details

Name:	0000000C.00000002.867992348.00007FF5442C4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442C4000
Size:	4096

Details

Name:	00000001.00000003.776775284.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Details

Name:	00000005.00000002.878043556.000000000269B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	269B000
Size:	4096

Details

Name:	00000014.00000002.615247604.00007FF511956000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511956000
Size:	16384

Details

Name:	00000004.00000002.491944033.0000000002CDE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CDE000
Size:	28672

Details

Name:	00000004.00000003.491595280.00000000035D1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D1000
Size:	12288

Details

Name:	00000010.00000002.575534385.0000028482A13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A13000
Size:	86016

Details

Name:	00000004.00000003.453467531.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000003.659175854.000001A26E463000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E463000
Size:	49152

Details

Name:	00000017.00000003.637040506.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	114688

Details

Name:	0000000C.00000002.867822361.00007FF544193000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544193000
Size:	4096

Details

Name:	00000010.00000002.576043933.00007FF5098B7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5098B7000
Size:	32768

Details

Name:	00000007.00000003.486423143.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000011.00000002.878731107.00007FF599C9F000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599C9F000
Size:	4096

Details

Name:	00000017.00000003.640527361.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	94208

Details

Name:	00000011.00000000.562321195.00007DF5A3B60000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B60000
Size:	12288

Details

Name:	00000007.00000003.489447672.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	0000000B.00000002.506840133.00007DF4C0E60000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4C0E60000
Size:	20480

Details

Name:	00000018.00000000.633493359.00007DF5906D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906D0000
Size:	12288

Details

Name:	0000000C.00000003.518889636.000002CD6FB20000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB20000
Size:	4096

Details

Name:	00000010.00000003.575088634.0000028482A49000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A49000
Size:	12288

Details

Name:	00000014.00000002.614510537.0000008188D2B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8188D2B000
Size:	20480

Details

Name:	00000017.00000003.635970673.000001A26ED7E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED7E000
Size:	94208

Details

Name:	00000017.00000002.660768223.00007FF5D0845000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0845000
Size:	12288

Details

Name:	00000001.00000003.486097928.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000C.00000002.868050303.00007FF5442E1000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442E1000
Size:	8192

Details

Name:	00000017.00000003.646479791.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	12288

Details

Name:	0000000C.00000003.865673857.000002CD6ABE0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6ABE0000
Size:	8192

Details

Name:	00000005.00000002.878296002.0000000002B59000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B59000
Size:	4096

Details

Name:	00000008.00000002.517127124.000000007F9D0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9D0000
Size:	4096

Details

Name:	00000005.00000003.482905459.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000014.00000003.613982051.00000189CB849000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB849000
Size:	4096

Details

Name:	00000010.00000003.574954060.0000028482A76000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A76000
Size:	40960

Details

Name:	00000005.00000002.877924124.00000000025FF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25FF000
Size:	32768

Details

Name:	00000017.00000002.659579399.000001A26E3A0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E3A0000
Size:	4096

Details

Name:	0000000C.00000003.528193857.000002CD6FCE8000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCE8000
Size:	4096

Details

Name:	00000017.00000002.660229767.000001A26ED7E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED7E000
Size:	45056

Details

Name:	00000004.00000003.488904303.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.489582725.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000001.388936272.000000006F110000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	00000004.00000002.493005333.0000000005050000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5050000
Size:	4096

Details

Name:	0000000C.00000002.867516775.00007FF543F5C000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543F5C000
Size:	8192

Details

Name:	00000005.00000002.878565684.0000000002F80000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2F80000
Size:	4096

Details

Name:	00000017.00000002.661007406.00007FF5D0971000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0971000
Size:	8192

Details

Name:	00000005.00000002.877946137.000000000261A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	261A000
Size:	24576

Details

Name:	00000010.00000002.575333958.000000CC4C6FE000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4C6FE000
Size:	8192

Details

Name:	00000010.00000002.576062628.00007FF509A71000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509A71000
Size:	8192

Details

Name:	00000011.00000002.878273525.00000175078B0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	175078B0000
Size:	49152

Details

Name:	00000014.00000002.614861854.00007DF51B7C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7C0000
Size:	4096

Details

Name:	00000004.00000003.474935252.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000003.648907721.000001A26EDA2000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDA2000
Size:	8192

Details

Name:	00000005.00000003.454672913.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.539881778.0000000000C84000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C84000
Size:	20480

Details

Name:	00000017.00000002.660857886.00007FF5D08BF000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08BF000
Size:	4096

Details

Name:	00000010.00000002.575834114.00007DF411A70000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF411A70000
Size:	20480

Details

Name:	00000004.00000003.469643651.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.463045774.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000002.516013643.0000000002684000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2684000
Size:	32768

Details

Name:	00000005.00000002.878165464.0000000002930000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2930000
Size:	102400

Details

Name:	00000017.00000003.641405793.000001A26EDBE000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDBE000
Size:	147456

Details

Name:	0000000C.00000003.865882863.000002CD6AD04000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD04000
Size:	16384

Details

Name:	00000004.00000003.464485871.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.516006378.000000000267C000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C000
Size:	20480

Details

Name:	00000014.00000002.614526735.000000818907F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	818907F000
Size:	4096

Details

Name:	00000007.00000002.508598146.00000000025AF000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25AF000
Size:	32768

Details

Name:	00000001.00000003.539875978.0000000000C80000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C80000
Size:	4096

Details

Name:	00000005.00000002.879025577.0000000004860000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4860000
Size:	4096

Details

Name:	00000007.00000003.486758300.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000001.00000003.587795129.0000000000C3F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3F000
Size:	299008

Details

Name:	00000004.00000003.479494589.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000003.529130293.000002CD6AD18000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD18000
Size:	4096

Details

Name:	00000005.00000003.484077710.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000007.00000003.479290131.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	0000000C.00000003.865655993.000002CD6B8F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6B8F0000
Size:	4096

Details

Name:	00000005.00000003.483072821.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000002.516538133.000000000463D000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	463D000
Size:	12288

Details

Name:	0000000C.00000003.865708656.000002CD6A502000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A502000
Size:	49152

Details

Name:	00000004.00000000.353404107.000000007F5B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5B2000
Size:	4096

Details

Name:	00000010.00000002.576478881.00007FF509D32000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D32000
Size:	49152

Details

Name:	0000000C.00000002.867637475.00007FF5440D2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440D2000
Size:	20480

Details

Name:	00000008.00000002.516106904.0000000002C2B000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C2B000
Size:	12288

Details

Name:	00000017.00000002.660884757.00007FF5D08CF000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08CF000
Size:	8192

Details

Name:	00000005.00000002.880216906.0000000005985000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5985000
Size:	4096

Details

Name:	00000005.00000003.769894364.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Details

Name:	00000014.00000000.602330164.00007DF51B7B0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7B0000
Size:	4096

Details

Name:	00000018.00000002.645436843.000001AEC203B000.00000004.00000020.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1AEC203B000
Size:	28672

Details

Name:	00000007.00000002.508752513.0000000002663000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2663000
Size:	16384

Details

Name:	00000017.00000003.647056416.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	794624

Details

Name:	0000000C.00000002.868193412.00007FF544337000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544337000
Size:	4096

Details

Name:	00000010.00000002.576811895.00007FF509DBD000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DBD000
Size:	12288

Details

Name:	00000014.00000002.614564267.000000818947F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	818947F000
Size:	4096

Details

Name:	0000000B.00000002.507112706.00007FF5B9103000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9103000
Size:	24576

Details

Name:	00000001.00000002.879928264.000000006F19D000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F19D000
Size:	4096

Details

Name:	00000005.00000002.877689626.00000000023EE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EE000
Size:	8192

Details

Name:	00000004.00000003.471786844.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000000.353368833.0000000003220000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3220000
Size:	102400

Details

Name:	0000000B.00000002.507029000.00007FF5B8FE6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8FE6000
Size:	4096

Details

Name:	00000010.00000002.576457698.00007FF509D2A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D2A000
Size:	24576

Details

Name:	00000004.00000003.449817163.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.776712663.0000000000CA3000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA3000
Size:	49152

Details

Name:	00000014.00000002.614662635.00000189CB802000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB802000
Size:	65536

Details

Name:	00000008.00000003.476715776.0000000002CD3000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD3000
Size:	12288

Details

Name:	00000008.00000003.482844596.0000000004820000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4820000
Size:	4096

Details

Name:	0000000C.00000002.866284076.000002CD6A3D0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A3D0000
Size:	4096

Details

Name:	00000007.00000003.488165769.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000001.00000003.539900104.0000000000C86000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C86000
Size:	12288

Details

Name:	00000014.00000002.614691425.00000189CB829000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB829000
Size:	73728

Details

Name:	00000001.00000002.879158275.0000000003E0F000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3E0F000
Size:	4096

Details

Name:	00000017.00000003.634615354.000001A26EAC0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EAC0000
Size:	4096

Details

Name:	00000014.00000002.614601603.00000189CB690000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CB690000
Size:	102400

Details

Name:	00000008.00000003.476668986.00000000046B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	46B0000
Size:	4096

Details

Name:	00000004.00000003.449515494.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000002.509197647.00000000041F0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	41F0000
Size:	4096

Details

Name:	00000008.00000002.516883155.000000000483C000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	483C000
Size:	4096

Details

Name:	00000001.00000003.483945605.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000008.00000001.380265089.000000006F110000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	0000000C.00000002.867872222.00007FF544228000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544228000
Size:	4096

Details

Name:	00000011.00000002.878152391.0000017506E90000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17506E90000
Size:	12288

Details

Name:	0000000C.00000003.518221672.000002CD6FBB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FBB0000
Size:	8192

Details

Name:	00000017.00000003.648836149.000001A26ED8C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8C000
Size:	24576

Details

Name:	00000008.00000003.476719648.0000000002CD9000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD9000
Size:	16384

Details

Name:	00000001.00000002.877825108.00000000008E0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8E0000
Size:	4096

Details

Name:	00000005.00000003.583709623.0000000002E11000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E11000
Size:	151552

Details

Name:	00000017.00000002.659656929.000001A26E44C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E44C000
Size:	24576

Details

Name:	00000017.00000003.659226466.000001A26E449000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E449000
Size:	4096

Details

Name:	00000007.00000002.509263552.000000007FC82000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC82000
Size:	4096

Details

Name:	00000010.00000002.576931274.00007FF509DDA000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DDA000
Size:	12288

Details

Name:	00000017.00000002.660742129.00007FF5D07D8000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D07D8000
Size:	12288

Details

Name:	0000000B.00000002.506794344.000001C2A3200000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C2A3200000
Size:	4096

Details

Name:	00000001.00000003.589701371.0000000000C8E000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8E000
Size:	135168

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.660250445.000001A26ED8E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8E000
Size:	16384

Details

Name:	00000004.00000003.451960742.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.448912430.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000014.00000002.615311203.00007FF5119D4000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119D4000
Size:	8192

Details

Name:	00000001.00000003.480364286.0000000001010000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000017.00000002.659560647.000001A26E2A0000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1A26E2A0000
Size:	12288

Details

Name:	00000005.00000003.773292227.0000000002EA7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EA7000
Size:	77824

Details

Name:	00000008.00000002.516092073.0000000002C20000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C20000
Size:	20480

Details

Name:	00000010.00000002.576080251.00007FF509B9A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509B9A000
Size:	16384

Details

Name:	00000017.00000002.661022707.00007FF5D0977000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0977000
Size:	20480

Details

Name:	00000005.00000003.452965094.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000002.878760358.0000000002890000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2890000
Size:	4096

Details

Name:	00000010.00000002.575426574.0000028482990000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28482990000
Size:	102400

Details

Name:	0000000C.00000002.867969203.00007FF5442B7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442B7000
Size:	8192

Details

Name:	00000011.00000002.878849636.00007FF599D57000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D57000
Size:	20480

Details

Name:	0000000B.00000002.507411931.00007FF5B91E6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91E6000
Size:	16384

Details

Name:	00000011.00000002.878202873.0000017507035000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17507035000
Size:	12288

Details

Name:	00000017.00000002.660559970.00007FF5D0631000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0631000
Size:	8192

Details

Name:	00000005.00000002.878321405.0000000002C70000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2C70000
Size:	4096

Details

Name:	00000001.00000003.484855932.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.508463662.00000000006C0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6C0000
Size:	4096

Details

Name:	00000007.00000002.508542909.00000000024DA000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24DA000
Size:	4096

Details

Name:	00000007.00000002.508323042.00000000003CB000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3CB000
Size:	12288

Details

Name:	00000017.00000000.631934060.00007DF5DA770000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA770000
Size:	4096

Details

Name:	00000017.00000003.634625056.000001A26EAC0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EAC0000
Size:	4096

Details

Name:	00000004.00000002.492042533.0000000002D75000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D75000
Size:	4096

Details

Name:	0000000C.00000003.865683959.000002CD6ABE3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6ABE3000
Size:	4096

Details

Name:	0000000C.00000003.865794604.000002CD6FB80000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB80000
Size:	4096

Details

Name:	00000007.00000002.509220978.0000000005F10000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5F10000
Size:	8192

Details

Name:	00000008.00000003.515535954.0000000002CCA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CCA000
Size:	28672

Details

Name:	00000017.00000002.659526260.000001A26E250000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E250000
Size:	102400

Details

Name:	0000000C.00000003.518350072.000002CD6FA94000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA94000
Size:	4096

Details

Name:	0000000C.00000000.517794816.00007FF5443E7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443E7000
Size:	16384

Details

Name:	0000000B.00000002.506735727.000001C2A3070000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3070000
Size:	61440

Details

Name:	00000014.00000002.614581462.000000818967F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	818967F000
Size:	4096

Details

Name:	00000007.00000002.508268051.0000000000340000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	340000
Size:	20480

Details

Name:	0000000B.00000002.506608823.000001C2A2DB0000.00000004.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1C2A2DB0000
Size:	4096

Details

Name:	00000004.00000003.461538913.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000018.00000002.645774586.00007FF5868C7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868C7000
Size:	20480

Details

Name:	00000010.00000002.575979195.00007FF5097B9000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5097B9000
Size:	16384

Details

Name:	0000000B.00000002.507162472.00007FF5B9116000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9116000
Size:	12288

Details

Name:	00000011.00000002.878927856.00007FF599D7A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D7A000
Size:	12288

Details

Name:	00000001.00000003.775838970.0000000004131000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4131000
Size:	307200

Details

Name:	00000007.00000003.484817744.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000004.00000002.492047347.0000000002D78000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D78000
Size:	45056

Details

Name:	00000008.00000002.516063657.00000000029F0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F0000
Size:	16384

Details

Name:	00000001.00000000.351850460.000000007F630000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F630000
Size:	12288

Details

Name:	00000005.00000003.726078564.0000000005ACD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5ACD000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.492162326.0000000002DC4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DC4000
Size:	32768

Details

Name:	00000004.00000002.493067236.000000007F5B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5B0000
Size:	4096

Details

Name:	0000000C.00000002.866582627.000002CD6A4A1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A4A1000
Size:	32768

Details

Name:	00000007.00000002.509227099.0000000005F14000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5F14000
Size:	4096

Details

Name:	00000001.00000003.682267005.0000000000C43000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C43000
Size:	286720

Details

Name:	00000004.00000002.492680810.0000000004E7E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E7E000
Size:	8192

Details

Name:	00000004.00000002.492069265.0000000002D96000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D96000
Size:	16384

Details

Name:	00000018.00000002.645673932.00007FF5864D8000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5864D8000
Size:	4096

Details

Name:	00000008.00000003.515562362.0000000002CD8000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD8000
Size:	90112

Details

Name:	00000011.00000002.878945162.00007FF599D96000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D96000
Size:	16384

Details

Name:	00000001.00000003.730135616.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	356352

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000003.641515011.000001A26F202000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F202000
Size:	147456

Details

Name:	00000005.00000003.476576069.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000007.00000003.470806802.00000000006B9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B9000
Size:	86016

Details

Name:	0000000C.00000002.867838190.00007FF5441AE000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5441AE000
Size:	4096

Details

Name:	0000000B.00000002.507052704.00007FF5B9038000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9038000
Size:	49152

Details

Name:	00000008.00000002.515708939.00000000007D0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	102400

Details

Name:	00000014.00000002.615379774.00007FF511A17000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511A17000
Size:	16384

Details

Name:	00000001.00000002.878987643.0000000002F40000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2F40000
Size:	4096

Details

Name:	0000000C.00000000.517728464.00007DF54E192000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E192000
Size:	4096

Details

Name:	00000014.00000002.615279593.00007FF5119C1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5119C1000
Size:	8192

Details

Name:	00000004.00000002.493037048.0000000007000000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7000000
Size:	4096

Details

Name:	00000008.00000002.516693128.0000000004680000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4680000
Size:	4096

Details

Name:	00000008.00000002.516121072.0000000002C70000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C70000
Size:	4096

Details

Name:	00000007.00000003.508055579.00000000006C2000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C2000
Size:	65536

Details

Name:	00000007.00000003.489874212.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.588053035.000000000544B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544B000
Size:	4096

Details

Name:	00000007.00000002.508679833.0000000002635000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2635000
Size:	4096

Details

Name:	00000011.00000002.877868471.0000017506BE0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17506BE0000
Size:	12288

Details

Name:	00000005.00000002.879731040.0000000004A8D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A8D000
Size:	12288

Details

Name:	00000007.00000003.489676162.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000005.00000003.818426433.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Details

Name:	00000008.00000002.515814564.000000000258B000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	258B000
Size:	24576

Details

Name:	00000017.00000003.648281364.000001A26EDD6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDD6000
Size:	61440

Details

Name:	0000000C.00000002.867458699.00007FF543BB3000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543BB3000
Size:	4096

Details

Name:	00000008.00000002.515955833.000000000264D000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	264D000
Size:	32768

Details

Name:	00000007.00000003.482846233.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000011.00000003.562819444.0000017506DE1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17506DE1000
Size:	12288

Details

Name:	00000001.00000003.481641725.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000010.00000002.575503241.0000028482A00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A00000
Size:	73728

Details

Name:	00000005.00000002.880148509.00000000058C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	58C0000
Size:	4096

Details

Name:	00000004.00000002.492519348.00000000034D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	34D0000
Size:	4096

Details

Name:	00000011.00000000.562379444.00007FF57EC4B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57EC4B000
Size:	12288

Details

Name:	00000011.00000002.878420928.00007DF5A3B40000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B40000
Size:	4096

Details

Name:	00000005.00000002.877911203.00000000025F7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25F7000
Size:	4096

Details

Name:	00000004.00000001.354119287.000000006F110000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F110000
Size:	4096

Details

Name:	00000004.00000003.464787424.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.868063294.00007FF5442EF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442EF000
Size:	8192

Details

Name:	00000018.00000002.645421750.000001AEC2030000.00000004.00000020.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1AEC2030000
Size:	40960

Details

Name:	00000001.00000003.487899961.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000008.00000002.516849932.0000000004780000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4780000
Size:	4096

Details

Name:	00000014.00000002.614594745.00000189CB680000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	189CB680000
Size:	4096

Details

Name:	00000017.00000002.660080685.000001A26ED00000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED00000
Size:	53248

Details

Name:	00000018.00000002.645317601.000001AEC1EF0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC1EF0000
Size:	102400

Details

Name:	00000014.00000003.613821937.00000189CB880000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB880000
Size:	40960

Details

Name:	0000000C.00000002.868128736.00007FF54430A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54430A000
Size:	24576

Details

Name:	00000005.00000003.476877134.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.637028027.0000000000C9A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9A000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.492536957.0000000003540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3540000
Size:	4096

Details

Name:	00000017.00000002.659477814.0000001607D7A000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607D7A000
Size:	24576

Details

Name:	00000018.00000002.645161357.000000ACEA47F000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACEA47F000
Size:	4096

Details

Name:	00000005.00000003.679100452.0000000002E11000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E11000
Size:	151552

Details

Name:	00000017.00000002.659877578.000001A26E4ED000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4ED000
Size:	32768

Details

Name:	00000005.00000002.878987097.00000000047E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	47E0000
Size:	12288

Details

Name:	00000004.00000002.492124963.0000000002DBF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DBF000
Size:	8192

Details

Name:	00000005.00000002.878022812.0000000002685000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2685000
Size:	4096

Details

Name:	00000004.00000002.492318881.00000000032C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32C0000
Size:	16384

Details

Name:	00000004.00000003.470246551.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000008.00000002.516032121.00000000026A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A0000
Size:	12288

Details

Name:	00000005.00000003.529933580.0000000005820000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5820000
Size:	4096

Details

Name:	00000010.00000000.559692084.00007DF513BA0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BA0000
Size:	4096

Details

Name:	00000014.00000002.614588232.00000189CB670000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	189CB670000
Size:	4096

Details

Name:	0000000C.00000000.517665312.000002CD6A3A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A3A0000
Size:	102400

Details

Name:	00000005.00000003.726297259.0000000002EA7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EA7000
Size:	77824

Details

Name:	00000004.00000002.492565415.00000000035A0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	35A0000
Size:	32768

Details

Name:	0000000C.00000002.867750137.00007FF544144000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544144000
Size:	4096

Details

Name:	0000000B.00000003.506384260.000001C2A3051000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3051000
Size:	77824

Details

Name:	00000001.00000002.880000265.000000006F1A8000.00000040.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6F1A8000
Size:	8192

Details

Name:	00000010.00000002.576854246.00007FF509DC4000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DC4000
Size:	8192

Details

Name:	00000008.00000002.515978078.0000000002663000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2663000
Size:	16384

Details

Name:	00000004.00000002.491999649.0000000002D0A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D0A000
Size:	8192

Details

Name:	00000007.00000002.509015494.00000000026A8000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A8000
Size:	16384

Details

Name:	00000017.00000002.659404847.00000016076FE000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	16076FE000
Size:	8192

Details

Name:	00000007.00000002.508496469.00000000009CB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9CB000
Size:	8192

Details

Name:	00000017.00000002.660304944.00007DF5DA760000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA760000
Size:	4096

Details

Name:	00000007.00000002.508998471.000000000268D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	268D000
Size:	36864

Details

Name:	00000014.00000002.614934495.00007FF5113C9000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5113C9000
Size:	16384

Details

Name:	00000018.00000002.645465965.000001AEC2058000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2058000
Size:	28672

Details

Name:	00000011.00000002.878739862.00007FF599CB4000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599CB4000
Size:	20480

Details

Name:	0000000C.00000003.865772274.000002CD6FB60000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB60000
Size:	4096

Details

Name:	00000001.00000002.877784445.00000000007C0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	16384

Details

Name:	00000005.00000003.533133207.0000000002E54000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E54000
Size:	262144

Details

Name:	00000017.00000002.660267871.000001A26ED98000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED98000
Size:	8192

Details

Name:	0000000B.00000002.506654335.000001C2A2FF0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A2FF0000
Size:	4096

Details

Name:	00000017.00000002.659822898.000001A26E4BF000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4BF000
Size:	24576

Details

Name:	0000000C.00000002.866230377.000002CD6A380000.00000004.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2CD6A380000
Size:	4096

Details

Name:	00000018.00000002.645513063.000001AEC22C0000.00000004.00000040.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1AEC22C0000
Size:	12288

Details

Name:	00000017.00000003.648236882.000001A26EDC4000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDC4000
Size:	61440

Details

Name:	00000004.00000003.468437750.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.867947434.00007FF5442A8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442A8000
Size:	4096

Details

Name:	00000005.00000002.880251888.00000000059C5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59C5000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.483143420.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.478460570.0000000000FD0000.00000040.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FD0000
Size:	4096

Details

Name:	00000001.00000003.636775016.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	335872

Details

Name:	00000010.00000002.575895399.00007DF513BC0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BC0000
Size:	12288

Details

Name:	00000004.00000003.452864972.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.877899375.00000000025EE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25EE000
Size:	28672

Details

Name:	00000004.00000002.491782177.0000000002BB9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB9000
Size:	8192

Details

Name:	00000017.00000002.660242198.000001A26ED8A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8A000
Size:	8192

Details

Name:	00000017.00000003.640482453.000001A26EDAF000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDAF000
Size:	90112

Details

Name:	00000001.00000003.489873497.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000B.00000002.507341036.00007FF5B91AD000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91AD000
Size:	12288

Details

Name:	00000005.00000002.878586033.0000000002FD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD0000
Size:	4096

Details

Name:	00000010.00000002.576568028.00007FF509D57000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D57000
Size:	4096

Details

Name:	00000004.00000003.491418540.0000000005060000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5060000
Size:	4096

Details

Name:	00000001.00000002.880227901.000000007F630000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F630000
Size:	12288

Details

Name:	0000000C.00000002.868359934.00007FF5443D3000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443D3000
Size:	8192

Details

Name:	00000004.00000002.492526554.000000000351E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	351E000
Size:	8192

Details

Name:	00000005.00000003.634806752.0000000002DFE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DFE000
Size:	45056

Details

Name:	00000007.00000002.509191421.00000000041E0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	41E0000
Size:	4096

Details

Name:	0000000C.00000002.867666250.00007FF5440E4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440E4000
Size:	4096

Details

Name:	0000000C.00000002.866549859.000002CD6A494000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A494000
Size:	40960

Details

Name:	0000000C.00000002.868229360.00007FF544391000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF544391000
Size:	8192

Details

Name:	00000018.00000002.645702882.00007FF58682E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58682E000
Size:	16384

Details

Name:	00000007.00000002.508773304.0000000002668000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2668000
Size:	20480

Details

Name:	00000005.00000002.879776594.0000000004AF0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4AF0000
Size:	4096

Details

Name:	00000007.00000003.477481892.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000004.00000002.492454297.0000000003480000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3480000
Size:	20480

Details

Name:	0000000B.00000002.507435058.00007FF5B91F7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91F7000
Size:	16384

Details

Name:	00000005.00000002.879140005.0000000004910000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4910000
Size:	733184

Details

Name:	00000008.00000002.515809292.00000000024DA000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24DA000
Size:	4096

Details

Name:	00000001.00000003.491556230.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000003.470870666.0000000004110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4110000
Size:	4096

Details

Name:	00000004.00000002.493030471.0000000006CB3000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6CB3000
Size:	8192

Details

Name:	00000005.00000002.879698644.0000000004A0D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A0D000
Size:	12288

Details

Name:	0000000C.00000002.867897389.00007FF54425E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54425E000
Size:	4096

Details

Name:	00000004.00000003.437559629.00000000035D1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D1000
Size:	12288

Details

Name:	00000005.00000002.878285096.0000000002B55000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B55000
Size:	8192

Details

Name:	00000005.00000003.479590180.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.483546772.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000017.00000002.659387608.000000160767F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	160767F000
Size:	4096

Details

Name:	00000004.00000002.492703226.0000000004F3D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F3D000
Size:	12288

Details

Name:	00000008.00000002.515883260.00000000025D1000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D1000
Size:	8192

Details

Name:	00000005.00000003.477480120.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000002.492602729.00000000035D1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35D1000
Size:	12288

Details

Name:	00000017.00000003.636986162.000001A26EDD6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDD6000
Size:	114688

Details

Name:	00000017.00000002.660068249.000001A26EAD0000.00000004.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1A26EAD0000
Size:	8192

Details

Name:	00000010.00000002.575871319.00007DF513BA2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BA2000
Size:	4096

Details

Name:	00000018.00000002.645200466.000000ACEA57E000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACEA57E000
Size:	8192

Details

Name:	00000001.00000003.488876394.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000014.00000002.614705639.00000189CB83C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB83C000
Size:	53248

Details

Name:	00000005.00000002.878158440.0000000002920000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2920000
Size:	4096

Details

Name:	00000017.00000002.660644361.00007FF5D075A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D075A000
Size:	16384

Details

Name:	00000005.00000002.877774041.00000000024F5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24F5000
Size:	8192

Details

Name:	00000017.00000002.660870894.00007FF5D08C1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08C1000
Size:	8192

Details

Name:	0000000C.00000002.867721649.00007FF54411E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54411E000
Size:	4096

Details

Name:	0000000C.00000002.866705712.000002CD6A8D0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A8D0000
Size:	16384

Details

Name:	0000000B.00000002.506785992.000001C2A3113000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3113000
Size:	20480

Details

Name:	00000005.00000003.679128694.0000000002E37000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E37000
Size:	114688

Details

Name:	00000005.00000002.878232272.00000000029CB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29CB000
Size:	20480

Details

Name:	00000010.00000002.575491969.00000284829F0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	284829F0000
Size:	16384

Details

Name:	00000005.00000002.877803335.0000000002511000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2511000
Size:	8192

Details

Name:	00000007.00000003.490075779.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	0000000C.00000003.862196100.000002CD6FB40000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB40000
Size:	4096

Details

Name:	00000005.00000003.583333809.0000000002DFE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DFE000
Size:	32768

Details

Name:	00000011.00000002.878175531.0000017507010000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17507010000
Size:	4096

Details

Name:	00000004.00000003.460534032.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000003.477782478.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000005.00000002.878361935.0000000002DC0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2DC0000
Size:	32768

Details

Name:	00000004.00000003.479156479.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.474030746.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.878446742.0000000002E0D000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E0D000
Size:	4096

Details

Name:	0000000B.00000002.507097200.00007FF5B90FF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B90FF000
Size:	8192

Details

Name:	00000005.00000003.459629615.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.726164400.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	299008

Details

Name:	00000005.00000002.880478867.000000006F116000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F116000
Size:	40960

Details

Name:	00000005.00000003.479926679.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000003.480664869.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	0000000B.00000002.506542916.00000074D067C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	74D067C000
Size:	16384

Details

Name:	00000001.00000003.821311540.0000000000C97000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	24576

Details

Name:	00000017.00000002.660993414.00007FF5D0917000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0917000
Size:	4096

Details

Name:	00000018.00000002.645733768.00007FF586867000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586867000
Size:	4096

Details

Name:	00000005.00000002.880446938.000000006F115000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F115000
Size:	4096

Details

Name:	00000007.00000003.488782230.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000007.00000002.509180361.00000000041D0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	41D0000
Size:	12288

Details

Name:	00000017.00000003.639643269.000001A26ED8E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8E000
Size:	122880

Details

Name:	00000017.00000002.661123094.00007FF5D09B3000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D09B3000
Size:	8192

Details

Name:	00000010.00000002.575421660.0000028482980000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	28482980000
Size:	4096

Details

Name:	00000018.00000002.645564914.000001AEC2650000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC2650000
Size:	4096

Details

Name:	00000005.00000003.726193066.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	282624

Details

Name:	00000014.00000000.602348737.00007DF51B7C2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7C2000
Size:	4096

Details

Name:	00000011.00000002.878638569.00007FF599628000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599628000
Size:	4096

Details

Name:	00000004.00000002.492379910.000000000346E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	346E000
Size:	8192

Details

Name:	00000014.00000000.602343064.00007DF51B7C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7C0000
Size:	4096

Details

Name:	00000010.00000002.576986218.00007FF509DF6000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DF6000
Size:	16384

Details

Name:	00000011.00000002.877724020.0000003560579000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3560579000
Size:	28672

Details

Name:	00000008.00000002.516472564.00000000045FE000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	45FE000
Size:	8192

Details

Name:	00000001.00000003.480034750.0000000001010000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000005.00000003.452061088.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000002.516656090.000000000467E000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	467E000
Size:	8192

Details

Name:	00000011.00000002.878189681.0000017507030000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17507030000
Size:	12288

Details

Name:	0000000B.00000002.506760781.000001C2A3100000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3100000
Size:	4096

Details

Name:	00000001.00000002.879530946.0000000004230000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4230000
Size:	4096

Details

Name:	00000017.00000002.659456722.0000001607B77000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607B77000
Size:	36864

Details

Name:	00000001.00000003.730333586.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Details

Name:	00000001.00000000.351826411.0000000000660000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	660000
Size:	102400

Details

Name:	00000005.00000003.532571924.0000000002E57000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E57000
Size:	249856

Details

Name:	00000018.00000000.633462411.00007DF5906B0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906B0000
Size:	4096

Details

Name:	00000011.00000000.562245198.0000017506BC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	17506BC0000
Size:	102400

Details

Name:	00000005.00000003.457720705.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000018.00000002.645684044.00007FF586823000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586823000
Size:	4096

Details

Name:	00000008.00000002.515992523.000000000266E000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	266E000
Size:	12288

Details

Name:	00000001.00000003.488164839.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000001.00000003.821954349.0000000000CAE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAE000
Size:	4096

Details

Name:	00000017.00000003.639556936.000001A26ED8E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8E000
Size:	32768

Details

Name:	0000000B.00000000.494636334.00007DF5C2FA2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2FA2000
Size:	4096

Details

Name:	00000007.00000002.508708099.000000000264D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	264D000
Size:	32768

Details

Name:	00000017.00000002.660661857.00007FF5D076F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D076F000
Size:	12288

Details

Name:	00000017.00000002.659413917.00000016077FB000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	16077FB000
Size:	20480

Details

Name:	00000008.00000003.479526669.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	00000008.00000000.379043826.00000000026A8000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A8000
Size:	16384

Details

Name:	0000000C.00000002.867093137.000002CD6FCB5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCB5000
Size:	36864

Details

Name:	00000005.00000003.634825677.0000000002E11000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E11000
Size:	151552

Details

Name:	00000005.00000003.479289016.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000003.457854728.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000002.491957727.0000000002CE7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CE7000
Size:	4096

Details

Name:	0000000C.00000000.517715321.00007DF54E182000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54E182000
Size:	4096

Details

Name:	0000000B.00000002.506577844.00000074D097B000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D097B000
Size:	20480

Details

Name:	00000001.00000002.878974580.0000000002F1E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2F1E000
Size:	8192

Details

Name:	00000004.00000003.467834836.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000017.00000002.659431794.0000001607977000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1607977000
Size:	36864

Details

Name:	00000017.00000002.660120998.000001A26ED13000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED13000
Size:	221184

Details

Name:	00000010.00000002.575610512.0000028482A4A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A4A000
Size:	8192

Details

Name:	00000007.00000002.508371285.0000000000680000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	680000
Size:	32768

Details

Name:	00000007.00000003.484053079.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000018.00000002.645607187.00007DF5906D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906D0000
Size:	12288

Details

Name:	00000004.00000003.489872449.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.492722167.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000005.00000003.771006148.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	905216

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.492005240.0000000002D0D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D0D000
Size:	12288

Details

Name:	00000007.00000002.508249746.00000000002E0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E0000
Size:	16384

Details

Name:	00000001.00000002.878774445.000000000291E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	291E000
Size:	8192

Details

Name:	00000007.00000002.508230704.000000000029A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29A000
Size:	24576

Details

Name:	00000005.00000003.632111377.0000000002DFE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DFE000
Size:	45056

Details

Name:	00000004.00000002.491919435.0000000002CCB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CCB000
Size:	24576

Details

Name:	00000017.00000002.661163733.00007FF5D09C7000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D09C7000
Size:	16384

Details

Name:	00000011.00000002.878936494.00007FF599D93000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D93000
Size:	8192

Details

Name:	0000000C.00000002.867794340.00007FF54418D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54418D000
Size:	4096

Details

Name:	00000017.00000003.639583618.000001A26F221000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26F221000
Size:	118784

Details

Name:	00000004.00000002.492011246.0000000002D11000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D11000
Size:	8192

Details

Name:	00000005.00000002.878088988.00000000026B8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B8000
Size:	20480

Details

Name:	00000008.00000002.517149674.000000007F9E2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9E2000
Size:	4096

Details

Name:	00000001.00000003.636051162.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	950272

Details

Name:	00000004.00000003.465993261.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000002.508457089.00000000006BC000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC000
Size:	4096

Details

Name:	00000005.00000003.634991894.000000000544B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544B000
Size:	4096

Details

Name:	00000004.00000003.437550015.00000000035DB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35DB000
Size:	69632

Details

Name:	00000005.00000003.577061111.0000000002E51000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E51000
Size:	4096

Details

Name:	00000008.00000003.515548878.0000000002CD2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD2000
Size:	12288

Details

Name:	00000005.00000003.634917650.0000000002E54000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E54000
Size:	270336

Details

Name:	00000014.00000002.615006546.00007FF5117AA000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5117AA000
Size:	16384

Details

Name:	00000005.00000003.461773451.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000002.879044241.000000000398F000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	398F000
Size:	4096

Details

Name:	0000000B.00000002.507424052.00007FF5B91F2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91F2000
Size:	12288

Details

Name:	00000005.00000003.484312420.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000003.482186442.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.437563700.00000000035D7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D7000
Size:	16384

Details

Name:	0000000C.00000002.866789858.000002CD6AC02000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AC02000
Size:	4096

Details

Name:	0000000C.00000003.865899801.000002CD6AD13000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD13000
Size:	20480

Details

Name:	00000011.00000002.878389181.0000017507B20000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17507B20000
Size:	4096

Details

Name:	00000005.00000003.486689973.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000004.00000003.454070760.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.484380476.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.475303703.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.867793148.00000000041BE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	41BE000
Size:	299008

Details

Name:	00000005.00000003.679046454.0000000002EB9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB9000
Size:	4096

Details

Name:	0000000C.00000002.868218049.00007FF54433E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54433E000
Size:	4096

Details

Name:	00000007.00000003.470841188.00000000006B1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B1000
Size:	4096

Details

Name:	00000011.00000002.878662014.00007FF59996E000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59996E000
Size:	8192

Details

Name:	0000000C.00000002.866345143.000002CD6A413000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A413000
Size:	69632

Details

Name:	00000008.00000003.488812407.0000000002CD5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD5000
Size:	90112

Details

Name:	00000004.00000002.493072182.000000007F5B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5B2000
Size:	4096

Details

Name:	00000017.00000002.660969617.00007FF5D0906000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0906000
Size:	16384

Details

Name:	00000007.00000003.508042429.00000000006C2000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C2000
Size:	65536

Details

Name:	00000017.00000002.660999810.00007FF5D0919000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0919000
Size:	4096

Details

Name:	00000001.00000002.879211625.000000000409E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	409E000
Size:	8192

Details

Name:	00000001.00000003.682310755.0000000000C97000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	12288

Details

Name:	00000008.00000002.517158278.000000007F9F0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9F0000
Size:	12288

Details

Name:	00000017.00000000.631892722.000001A26E250000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E250000
Size:	102400

Details

Name:	00000008.00000002.516954700.0000000006570000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6570000
Size:	8192

Details

Name:	00000004.00000002.492223048.0000000002DE8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE8000
Size:	16384

Details

Name:	00000004.00000003.473729416.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.457519702.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.879127885.0000000004900000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4900000
Size:	8192

Details

Name:	00000004.00000003.486624984.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.437529047.00000000035D1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D1000
Size:	110592

Details

Name:	00000001.00000003.776741270.0000000000C9D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9D000
Size:	20480

Details

Name:	00000010.00000002.575682999.0000028482A81000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A81000
Size:	65536

Details

Name:	00000007.00000003.508036029.00000000006C0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C0000
Size:	4096

Details

Name:	0000000C.00000002.866220239.000000EF43C7E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF43C7E000
Size:	8192

Details

Name:	00000008.00000003.480366124.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	00000011.00000002.878879013.00007FF599D64000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D64000
Size:	8192

Details

Name:	00000008.00000002.516227782.0000000002DA0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA0000
Size:	36864

Details

Name:	00000005.00000002.879050987.00000000048B0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	48B0000
Size:	4096

Details

Name:	00000018.00000002.645805460.00007FF5868D7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868D7000
Size:	12288

Details

Name:	00000005.00000002.877965159.0000000002621000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2621000
Size:	8192

Details

Name:	00000017.00000002.660725270.00007FF5D07D0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D07D0000
Size:	4096

Details

Name:	00000005.00000000.353759601.000000007FC30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC30000
Size:	4096

Details

Name:	00000017.00000002.660294402.00007DF4D8630000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4D8630000
Size:	20480

Details

Name:	00000007.00000003.508019576.00000000006B1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6B1000
Size:	32768

Details

Name:	00000001.00000003.822037405.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Details

Name:	0000000C.00000003.528202954.000002CD6FCEA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCEA000
Size:	45056

Details

Name:	0000000C.00000002.866966970.000002CD6FC62000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC62000
Size:	143360

Details

Name:	00000014.00000002.615085813.00007FF511825000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511825000
Size:	8192

Details

Name:	0000000C.00000003.518254012.000002CD6FA5E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA5E000
Size:	73728

Details

Name:	00000005.00000002.880415375.000000006F113000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F113000
Size:	4096

Details

Name:	00000005.00000003.577133074.0000000002E37000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E37000
Size:	106496

Details

Name:	00000005.00000003.455577306.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000017.00000002.660107340.000001A26ED11000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED11000
Size:	4096

Details

Name:	00000004.00000002.491805302.0000000002BC3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC3000
Size:	4096

Details

Name:	00000001.00000003.868248634.000000000333C000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333C000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000003.482187662.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000010.00000002.577044409.00007FF509E07000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509E07000
Size:	16384

Details

Name:	00000001.00000002.878251462.0000000000C97000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C97000
Size:	57344

Details

Name:	0000000B.00000002.506685562.000001C2A3029000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3029000
Size:	73728

Details

Name:	00000018.00000003.645004133.000001AEC2060000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2060000
Size:	57344

Details

Name:	0000000B.00000002.506642934.000001C2A2E20000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C2A2E20000
Size:	8192

Details

Name:	00000001.00000003.536874906.0000000003E10000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E10000
Size:	4096

Details

Name:	00000011.00000002.878580934.00007FF599591000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599591000
Size:	4096

Details

Name:	00000001.00000002.879110126.0000000003BCD000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BCD000
Size:	12288

Details

Name:	0000000C.00000003.865818065.000002CD6FA70000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FA70000
Size:	4096

Details

Name:	00000007.00000002.508784518.000000000266E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	266E000
Size:	12288

Details

Name:	0000000B.00000002.506598517.00000074D0C7C000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74D0C7C000
Size:	16384

Details

Name:	00000008.00000003.515426030.0000000004840000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4840000
Size:	4096

Details

Name:	00000004.00000002.493061847.000000007F5A2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A2000
Size:	4096

Details

Name:	00000005.00000003.474365917.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.487094462.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000003.771938078.0000000005AD3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD3000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.480965217.0000000004810000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4810000
Size:	4096

Details

Name:	0000000C.00000002.867477493.00007FF543C4E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543C4E000
Size:	28672

Details

Name:	00000014.00000002.614986669.00007FF511681000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511681000
Size:	8192

Details

Name:	00000007.00000002.508736055.000000000265E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	265E000
Size:	16384

Details

Name:	00000001.00000003.866650887.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	1130496

Details

Name:	00000005.00000003.529925825.0000000005820000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5820000
Size:	4096

Details

Name:	00000005.00000003.579334207.0000000002E51000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E51000
Size:	307200

Details

Name:	00000004.00000003.491543918.00000000035D5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35D5000
Size:	69632

Details

Name:	00000017.00000003.646812044.000001A26ED9A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED9A000
Size:	200704

Details

Name:	00000017.00000002.660671179.00007FF5D0773000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0773000
Size:	4096

Details

Name:	0000000C.00000003.526499778.000002CD6AD18000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD18000
Size:	4096

Details

Name:	00000008.00000002.516272042.0000000003120000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3120000
Size:	4096

Details

Name:	00000004.00000002.492559772.000000000359E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	359E000
Size:	8192

Details

Name:	0000000C.00000002.866751975.000002CD6AA60000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6AA60000
Size:	4096

Details

Name:	00000011.00000002.878244806.0000017507250000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17507250000
Size:	4096

Details

Name:	00000017.00000002.660580454.00007FF5D0695000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0695000
Size:	8192

Details

Name:	00000004.00000003.462543582.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000018.00000002.645251275.000000ACEA67F000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACEA67F000
Size:	4096

Details

Name:	0000000C.00000002.867112697.000002CD6FCC0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCC0000
Size:	118784

Details

Name:	00000001.00000002.880188214.000000007F622000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F622000
Size:	4096

Details

Name:	00000004.00000002.491821941.0000000002BE5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE5000
Size:	28672

Details

Name:	00000005.00000003.864529025.0000000002E9F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9F000
Size:	110592

Details

Name:	00000014.00000000.602314291.00000189CB690000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CB690000
Size:	102400

Details

Name:	00000001.00000002.877945335.0000000000AAD000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	AAD000
Size:	8192

Details

Name:	00000011.00000002.878558510.00007FF57EC4B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57EC4B000
Size:	12288

Details

Name:	00000005.00000002.880953366.000000006F244000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F244000
Size:	8192

Details

Name:	00000008.00000002.515760505.0000000000870000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	870000
Size:	16384

Details

Name:	00000018.00000002.645185663.000000ACEA4FF000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACEA4FF000
Size:	4096

Details

Name:	00000005.00000002.878070144.00000000026AE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26AE000
Size:	16384

Details

Name:	00000017.00000002.660653834.00007FF5D076D000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D076D000
Size:	4096

Details

Name:	00000001.00000002.877707128.0000000000660000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	660000
Size:	102400

Details

Name:	00000001.00000002.879614461.000000006F115000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6F115000
Size:	4096

Details

Name:	0000000C.00000002.866895009.000002CD6FC2F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FC2F000
Size:	65536

Details

Name:	00000004.00000002.492715432.0000000004F80000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4F80000
Size:	733184

Details

Name:	00000007.00000003.491281937.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000008.00000000.379051907.000000007F9D2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9D2000
Size:	4096

Details

Name:	00000005.00000003.578538670.0000000005941000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5941000
Size:	843776

Details

Name:	00000001.00000002.880137444.000000007F612000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F612000
Size:	4096

Details

Name:	00000017.00000002.660939912.00007FF5D08EA000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08EA000
Size:	24576

Details

Name:	00000017.00000002.659835592.000001A26E4C6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E4C6000
Size:	61440

Details

Name:	0000000C.00000002.866170311.000000EF4347B000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF4347B000
Size:	20480

Details

Name:	00000010.00000002.575889991.00007DF513BB2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BB2000
Size:	4096

Details

Name:	00000008.00000002.516889617.000000000483D000.00000004.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	483D000
Size:	8192

Details

Name:	00000005.00000003.532117360.0000000002E58000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E58000
Size:	253952

Details

Name:	00000005.00000002.880974452.000000006F246000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F246000
Size:	20480

Details

Name:	00000005.00000002.878053339.000000000269D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	269D000
Size:	32768

Details

Name:	00000017.00000002.659922324.000001A26E502000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E502000
Size:	16384

Details

Name:	00000008.00000002.515835509.00000000025A7000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A7000
Size:	4096

Details

Name:	0000000C.00000002.866777562.000002CD6AC00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AC00000
Size:	4096

Details

Name:	00000005.00000003.634981426.000000000544C000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544C000
Size:	4096

Details

Name:	00000001.00000003.486459201.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000001.00000003.865654314.0000000000C97000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	24576

Details

Name:	00000004.00000003.475237618.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.723953929.0000000002E9D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9D000
Size:	8192

Details

Name:	00000018.00000002.645519474.000001AEC22C5000.00000004.00000040.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1AEC22C5000
Size:	8192

Details

Name:	0000000C.00000002.867782224.00007FF54418A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54418A000
Size:	4096

Details

Name:	00000001.00000003.637064058.000000000333C000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333C000
Size:	4096

Details

Name:	00000005.00000002.879119466.00000000048BF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	48BF000
Size:	4096

Details

Name:	00000004.00000002.492647378.00000000038A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	38A0000
Size:	69632

Details

Name:	00000011.00000003.562839799.0000017506DE3000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17506DE3000
Size:	4096

Details

Name:	00000014.00000002.615113015.00007FF511858000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511858000
Size:	49152

Details

Name:	00000001.00000003.775367368.00000000042E0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42E0000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.645726300.00007FF58685D000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58685D000
Size:	20480

Details

Name:	00000014.00000002.614642353.00000189CB7C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	189CB7C0000
Size:	16384

Details

Name:	00000005.00000002.878311214.0000000002C50000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C50000
Size:	16384

Details

Name:	00000005.00000002.879888256.0000000004FBE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FBE000
Size:	8192

Details

Name:	00000008.00000002.515939043.0000000002638000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2638000
Size:	45056

Details

Name:	00000008.00000002.517041593.00000000069E0000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	69E0000
Size:	4096

Details

Name:	00000008.00000002.515699959.00000000007C0000.00000004.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	7C0000
Size:	4096

Details

Name:	0000000B.00000002.507034853.00007FF5B9000000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9000000
Size:	4096

Details

Name:	00000008.00000002.515971279.000000000265E000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	265E000
Size:	16384

Details

Name:	00000017.00000003.648899050.000001A26EDA0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26EDA0000
Size:	4096

Details

Name:	00000011.00000002.877773365.0000017506BA0000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	17506BA0000
Size:	4096

Details

Name:	00000010.00000002.576333467.00007FF509D01000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D01000
Size:	8192

Details

Name:	0000000B.00000002.506775266.000001C2A3108000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3108000
Size:	24576

Details

Name:	00000004.00000002.492342653.00000000033F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33F0000
Size:	4096

Details

Name:	00000011.00000002.878324455.0000017507AF0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17507AF0000
Size:	65536

Details

Name:	00000010.00000002.576726876.00007FF509DB4000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DB4000
Size:	8192

Details

Name:	00000004.00000003.483545619.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000003.454438532.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.488774108.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000004.00000002.493012411.0000000006BC0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC0000
Size:	4096

Details

Name:	00000001.00000002.880057380.000000006F246000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F246000
Size:	20480

Details

Name:	00000011.00000002.878210382.0000017507039000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17507039000
Size:	4096

Details

Name:	00000001.00000003.681840913.0000000000C3C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	315392

Details

Name:	00000001.00000002.879555023.0000000004290000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4290000
Size:	4096

Details

Name:	00000004.00000003.491513171.00000000035C8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35C8000
Size:	32768

Details

Name:	00000017.00000002.660090185.000001A26ED0F000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED0F000
Size:	4096

Details

Name:	00000007.00000002.508470334.00000000006C3000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6C3000
Size:	61440

Details

Name:	00000005.00000003.726326518.000000000544C000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544C000
Size:	4096

Details

Name:	00000005.00000003.769852340.0000000005985000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5985000
Size:	4096

Details

Name:	0000000B.00000002.506658339.000001C2A3000000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3000000
Size:	4096

Details

Name:	00000018.00000000.633541376.00007FF586917000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586917000
Size:	16384

Details

Name:	00000018.00000000.633470619.00007DF5906B2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906B2000
Size:	4096

Details

Name:	00000014.00000002.615357462.00007FF511A06000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511A06000
Size:	16384

Details

Name:	00000004.00000003.474633818.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000007.00000002.508566071.000000000259E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	259E000
Size:	28672

Details

Name:	00000005.00000002.878999604.000000000482C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	482C000
Size:	16384

Details

Name:	00000010.00000002.575730721.0000028482B08000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482B08000
Size:	24576

Details

Name:	00000005.00000003.478685916.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000002.877904377.0000000000AA0000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	AA0000
Size:	4096

Details

Name:	0000000B.00000002.507184914.00007FF5B9122000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9122000
Size:	49152

Details

Name:	00000007.00000003.487898786.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000008.00000002.516402829.00000000045BD000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	45BD000
Size:	12288

Details

Name:	00000004.00000002.492057233.0000000002D8B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8B000
Size:	4096

Details

Name:	00000010.00000002.576206352.00007FF509C10000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509C10000
Size:	4096

Details

Name:	00000014.00000002.615153055.00007FF51190F000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51190F000
Size:	4096

Details

Name:	00000004.00000003.487612100.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.877986480.000000000262B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262B000
Size:	49152

Details

Name:	00000005.00000002.877888797.00000000025E4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25E4000
Size:	4096

Details

Name:	00000005.00000003.726335866.000000000544B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544B000
Size:	4096

Details

Name:	00000008.00000000.379048710.000000007F9D0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9D0000
Size:	4096

Details

Name:	00000007.00000003.485285342.0000000004210000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4210000
Size:	4096

Details

Name:	00000017.00000002.660339171.00007DF5DA772000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA772000
Size:	4096

Details

Name:	00000001.00000003.867882403.0000000000CA6000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA6000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.645712321.00007FF586836000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586836000
Size:	12288

Details

Name:	0000000C.00000002.867160627.000002CD6FCE8000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCE8000
Size:	4096

Details

Name:	00000007.00000002.509209127.00000000046AE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46AE000
Size:	8192

Details

Name:	00000001.00000003.480963881.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000017.00000002.659691130.000001A26E463000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26E463000
Size:	49152

Details

Name:	00000001.00000003.491884188.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	0000000B.00000002.507404371.00007FF5B91E3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91E3000
Size:	8192

Details

Name:	00000011.00000002.877749222.0000003560679000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3560679000
Size:	28672

Details

Name:	00000017.00000002.660569743.00007FF5D0635000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0635000
Size:	4096

Details

Name:	0000000C.00000002.866143275.000000EF4327B000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EF4327B000
Size:	20480

Details

Name:	00000004.00000003.452262212.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000004.00000002.491863107.0000000002C13000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C13000
Size:	12288

Details

Name:	00000011.00000003.589254426.0000017506D80000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17506D80000
Size:	4096

Details

Name:	00000007.00000003.507938492.0000000004658000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4658000
Size:	4096

Details

Name:	00000005.00000003.481532536.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000011.00000002.878684406.00007FF599BB8000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599BB8000
Size:	12288

Details

Name:	00000008.00000002.515950304.000000000264B000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	264B000
Size:	4096

Details

Name:	00000001.00000003.636911776.00000000041BE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	41BE000
Size:	299008

Details

Name:	00000005.00000003.579013911.0000000005CD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CD0000
Size:	524288

Details

Name:	00000017.00000002.659969536.000001A26E600000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E600000
Size:	4096

Details

Name:	00000004.00000002.492082568.0000000002D9E000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9E000
Size:	16384

Details

Name:	00000014.00000002.614635259.00000189CB6E0000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	189CB6E0000
Size:	8192

Details

Name:	00000017.00000002.660596898.00007FF5D06D0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D06D0000
Size:	8192

Details

Name:	00000005.00000003.450857463.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000002.868017044.00007FF5442D4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5442D4000
Size:	8192

Details

Name:	00000010.00000002.575411710.0000028482970000.00000004.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	28482970000
Size:	4096

Details

Name:	00000010.00000002.575481394.00000284829E0000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	284829E0000
Size:	8192

Details

Name:	00000014.00000002.615267129.00007FF511967000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511967000
Size:	4096

Details

Name:	00000011.00000002.878842516.00007FF599D54000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599D54000
Size:	4096

Details

Name:	00000004.00000002.492553279.000000000355B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	355B000
Size:	12288

Details

Name:	00000018.00000003.644915424.000001AEC2042000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC2042000
Size:	118784

Details

Name:	00000001.00000000.351838223.000000007F610000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	4096

Details

Name:	00000017.00000003.642391803.000001A26ED96000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED96000
Size:	245760

Details

Name:	0000000C.00000002.868396456.00007FF5443E2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5443E2000
Size:	36864

Details

Name:	00000004.00000003.490677509.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.575665110.0000028482A6D000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482A6D000
Size:	36864

Details

Name:	00000004.00000003.450118312.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000002.878719665.0000000003370000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3370000
Size:	4096

Details

Name:	00000005.00000003.486355082.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000008.00000002.515788014.0000000002483000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2483000
Size:	4096

Details

Name:	00000005.00000003.482168750.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	0000000C.00000003.529139713.000002CD6AD58000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AD58000
Size:	8192

Details

Name:	00000004.00000002.492532595.0000000003530000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3530000
Size:	4096

Details

Name:	00000010.00000000.559713597.00007DF513BB2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513BB2000
Size:	4096

Details

Name:	00000017.00000002.660894662.00007FF5D08D3000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08D3000
Size:	24576

Details

Name:	00000008.00000003.476679524.0000000002CEE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CEE000
Size:	32768

Details

Name:	00000008.00000002.515781704.0000000002479000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2479000
Size:	8192

Details

Name:	00000014.00000000.602354218.00007DF51B7D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51B7D0000
Size:	12288

Details

Name:	00000005.00000003.480527686.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000001.00000003.489581671.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000004.00000003.472691151.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	0000000C.00000002.867741795.00007FF54412B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54412B000
Size:	4096

Details

Name:	00000011.00000002.877930324.0000017506D20000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17506D20000
Size:	16384

Details

Name:	00000014.00000002.614963648.00007FF5114C7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5114C7000
Size:	32768

Details

Name:	00000005.00000002.878596491.0000000002FE0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2FE0000
Size:	20480

Details

Name:	00000017.00000002.660332215.00007DF5DA770000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA770000
Size:	4096

Details

Name:	00000010.00000002.575708003.0000028482B00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482B00000
Size:	4096

Details

Name:	0000000C.00000002.866270593.000002CD6A3C0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CD6A3C0000
Size:	12288

Details

Name:	00000005.00000003.483675863.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000018.00000002.645797698.00007FF5868D4000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868D4000
Size:	8192

Details

Name:	00000008.00000002.515774425.00000000009E2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E2000
Size:	12288

Details

Name:	00000008.00000002.516902875.0000000004C8C000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C8C000
Size:	16384

Details

Name:	00000001.00000002.878271635.0000000000CAD000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	CAD000
Size:	8192

Details

Name:	0000000C.00000003.519081895.000002CD6FBB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FBB0000
Size:	4096

Details

Name:	00000008.00000003.476702537.0000000002CD2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD2000
Size:	4096

Details

Name:	00000014.00000002.615178411.00007FF51191F000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51191F000
Size:	8192

Details

Name:	00000001.00000002.879330472.00000000040B0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	40B0000
Size:	4096

Details

Name:	00000004.00000002.492359595.0000000003410000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3410000
Size:	16384

Details

Name:	00000005.00000002.879017605.0000000004830000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4830000
Size:	4096

Details

Name:	00000001.00000003.776763570.000000000333C000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333C000
Size:	4096

Details

Name:	00000005.00000002.877707937.00000000024B9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B9000
Size:	40960

Details

Name:	00000011.00000002.878591520.00007FF5995DF000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5995DF000
Size:	4096

Details

Name:	00000001.00000002.879196399.0000000003F9E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F9E000
Size:	8192

Details

Name:	0000000C.00000003.865724480.000002CD6ABC1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6ABC1000
Size:	4096

Details

Name:	00000011.00000002.877881199.0000017506BF0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17506BF0000
Size:	4096

Details

Name:	00000007.00000002.508336537.00000000003E0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E0000
Size:	4096

Details

Name:	00000005.00000003.458256875.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000005.00000002.878139867.00000000026F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F0000
Size:	12288

Details

Name:	00000007.00000003.481716360.0000000004250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4250000
Size:	4096

Details

Name:	00000004.00000003.459127647.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.485522511.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.508380207.000000000068A000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	68A000
Size:	114688

Details

Name:	00000004.00000003.470882961.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.575716120.0000028482B02000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28482B02000
Size:	16384

Details

Name:	0000000C.00000002.867562798.00007FF54408D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54408D000
Size:	20480

Details

Name:	00000007.00000002.508307229.00000000003C0000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3C0000
Size:	20480

Details

Name:	00000017.00000003.641503222.000001A26ED8C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED8C000
Size:	24576

Details

Name:	00000017.00000002.660751986.00007FF5D0808000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D0808000
Size:	49152

Details

Name:	00000005.00000003.477781828.00000000047F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000010.00000002.575300000.000000CC4C3EB000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC4C3EB000
Size:	20480

Details

Name:	00000018.00000000.633443899.000001AEC1EF0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AEC1EF0000
Size:	102400

Details

Name:	00000001.00000002.877972121.0000000000AD0000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AD0000
Size:	16384

Details

Name:	0000000C.00000002.866526489.000002CD6A48D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A48D000
Size:	4096

Details

Name:	0000000B.00000002.506848195.00007DF5C2F90000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C2F90000
Size:	4096

Details

Name:	00000001.00000003.490074484.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000001.00000003.541228015.0000000000C86000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C86000
Size:	20480

Details

Name:	00000010.00000002.576948165.00007FF509DF3000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DF3000
Size:	8192

Details

Name:	00000008.00000002.515874897.00000000025CD000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25CD000
Size:	12288

Details

Name:	00000005.00000003.772363724.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	311296

Details

Name:	00000004.00000002.492446603.0000000003470000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3470000
Size:	4096

Details

Name:	0000000C.00000002.867626208.00007FF5440BF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5440BF000
Size:	4096

Details

Name:	00000010.00000002.575825782.0000028483202000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28483202000
Size:	4096

Details

Name:	0000000B.00000002.507040051.00007FF5B9005000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B9005000
Size:	8192

Details

Name:	00000017.00000002.659585815.000001A26E3D0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A26E3D0000
Size:	8192

Details

Name:	00000005.00000002.877729679.00000000024C9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24C9000
Size:	8192

Details

Name:	00000007.00000000.368468354.000000007FC92000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC92000
Size:	4096

Details

Name:	0000000C.00000002.867146171.000002CD6FCE2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FCE2000
Size:	16384

Details

Name:	00000010.00000002.575406612.000000CC4CC7F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CC4CC7F000
Size:	4096

Details

Name:	00000011.00000002.878694648.00007FF599BD1000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF599BD1000
Size:	4096

Details

Name:	00000017.00000002.660400100.00007FF5D019B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D019B000
Size:	8192

Details

Name:	00000014.00000002.615214746.00007FF511936000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF511936000
Size:	12288

Details

Name:	00000004.00000003.466931196.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000010.00000002.576241986.00007FF509C48000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509C48000
Size:	49152

Details

Name:	00000008.00000003.476685660.0000000002CD3000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD3000
Size:	110592

Details

Name:	00000014.00000003.613898801.00000189CB84E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	189CB84E000
Size:	4096

Details

Name:	00000017.00000003.648868099.000001A26ED96000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A26ED96000
Size:	24576

Details

Name:	00000017.00000002.660312359.00007DF5DA762000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DA762000
Size:	4096

Details

Name:	00000001.00000003.489984844.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000005.00000003.577169501.0000000002DFE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DFE000
Size:	24576

Details

Name:	0000000C.00000002.866766820.000002CD6AB50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6AB50000
Size:	4096

Details

Name:	0000000C.00000003.862648205.000002CD6FB20000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6FB20000
Size:	4096

Details

Name:	0000000C.00000002.866414764.000002CD6A43D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD6A43D000
Size:	98304

Details

Name:	00000004.00000003.463849738.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000005.00000003.725892945.0000000005A41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A41000
Size:	868352

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.773120771.00000000059C6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59C6000
Size:	278528

Details

Name:	00000017.00000002.660814803.00007FF5D08A4000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D08A4000
Size:	4096

Details

Name:	00000001.00000003.486792662.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000011.00000002.877970585.0000017506D90000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17506D90000
Size:	28672

Details

Name:	00000004.00000003.453166491.0000000005470000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000001.00000003.868262043.000000000333B000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	333B000
Size:	4096

Details

Name:	00000007.00000002.508919985.0000000002684000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2684000
Size:	32768

Details

Name:	00000005.00000002.880084835.00000000058B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	58B0000
Size:	65536

Details

Name:	00000001.00000003.775622900.0000000004231000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4231000
Size:	372736

Details

Name:	00000001.00000003.489434139.0000000000A40000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A40000
Size:	4096

Details

Name:	00000007.00000002.508293945.0000000000390000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	390000
Size:	4096

Details

Name:	00000010.00000002.576347062.00007FF509D0F000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509D0F000
Size:	8192

Details

Name:	00000004.00000003.491586908.00000000035C8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35C8000
Size:	32768

Details

Name:	00000005.00000002.878081118.00000000026B3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B3000
Size:	16384

Details

Name:	00000001.00000002.878956702.0000000002E08000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E08000
Size:	4096

Details

Name:	0000000B.00000002.506671985.000001C2A3013000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C2A3013000
Size:	86016

Details

Name:	0000000B.00000002.507383435.00007FF5B91BB000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B91BB000
Size:	16384

Details

Name:	00000001.00000002.879588854.000000006F111000.00000020.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6F111000
Size:	8192

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps