Automated Malware Analysis IOC Report for

Details

Name:	00000003.00000003.924511743.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.1001753087.000000000345E000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	345E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.1014909520.00000000051EE000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	51EE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1193046068.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1192669448.0000000004E69000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4E69000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.823359233.0000000002BA0000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2BA0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864576972.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864709880.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864693567.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864655840.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1191865511.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.909658482.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.860615722.0000000004D99000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D99000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.969626147.000000000536B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	536B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879677361.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864632404.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879729497.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.808088437.0000000002BA0000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2BA0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864675941.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879657231.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879706517.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879608437.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.832984433.00000000011B0000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	11B0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1193055591.00000000054ED000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	54ED000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864721048.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879635553.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.831287658.00000000026A0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	26A0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.864607115.0000000003758000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3758000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879582609.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.956702487.00000000035DB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	35DB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.866221002.0000000004549000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4549000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000003.806413963.0000000004C50000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	4C50000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1191630117.00000000030F9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	30F9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.879554279.00000000054E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.834978558.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000002.1032982803.00007FF594600000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594600000
Size:	8192

Details

Name:	00000013.00000002.1033034638.00007FF5946A3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5946A3000
Size:	24576

Details

Name:	00000013.00000003.1011986039.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	122880

Details

Name:	00000013.00000002.1032531332.0000012C0F002000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F002000
Size:	4096

Details

Name:	0000000D.00000002.950739027.00007FF54DD5E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD5E000
Size:	16384

Details

Name:	0000000F.00000002.986572803.000000B9C037B000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C037B000
Size:	20480

Details

Name:	00000000.00000002.1191989894.00000000041EE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	41EE000
Size:	8192

Details

Name:	00000004.00000000.676739075.00000000027D3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D3000
Size:	16384

Details

Name:	00000000.00000003.955974800.00000000046F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	46F1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.841240119.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	0000000D.00000000.934897248.00007DF562E62000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E62000
Size:	4096

Details

Name:	0000000F.00000002.986609329.000000B9C05F7000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C05F7000
Size:	36864

Details

Name:	00000005.00000002.866867178.0000000002704000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2704000
Size:	114688

Details

Name:	00000005.00000002.866490226.0000000001DCC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DCC000
Size:	16384

Details

Name:	00000003.00000000.667822199.000000007F602000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F602000
Size:	4096

Details

Name:	00000004.00000003.823163708.0000000002B90000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2B90000
Size:	4096

Details

Name:	00000003.00000003.833873032.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	0000000F.00000000.975059614.00007DF5378A0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5378A0000
Size:	4096

Details

Name:	00000003.00000002.1191375364.0000000002ADB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ADB000
Size:	20480

Details

Name:	00000013.00000002.1032834884.00007FF594153000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594153000
Size:	8192

Details

Name:	00000004.00000003.828893584.0000000002BE0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BE0000
Size:	4096

Details

Name:	00000003.00000002.1193680818.000000006E48F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E48F000
Size:	16384

Details

Name:	00000013.00000003.1017909548.0000012C0F172000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F172000
Size:	73728

Details

Name:	00000009.00000002.870566470.000001F8AD629000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD629000
Size:	73728

Details

Name:	00000003.00000002.1191515771.0000000002BEF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEF000
Size:	4096

Details

Name:	00000013.00000002.1032843144.00007FF594157000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594157000
Size:	4096

Details

Name:	00000013.00000002.1033021127.00007FF594651000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594651000
Size:	12288

Details

Name:	00000013.00000003.1016618566.0000012C0F1CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CE000
Size:	4096

Details

Name:	00000014.00000002.1019348285.0000015615B20000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15615B20000
Size:	8192

Details

Name:	00000005.00000002.867081400.00000000029AC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AC000
Size:	4096

Details

Name:	00000003.00000002.1191441732.0000000002B90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B90000
Size:	4096

Details

Name:	00000005.00000002.867116198.00000000029C7000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29C7000
Size:	8192

Details

Name:	0000000F.00000002.986708353.000001FDF8802000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8802000
Size:	65536

Details

Name:	00000014.00000002.1019283530.0000015615A20000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15615A20000
Size:	69632

Details

Name:	00000002.00000002.854382019.0000000002CB3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CB3000
Size:	16384

Details

Name:	0000000D.00000002.950478257.00007FF54DB93000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB93000
Size:	8192

Details

Name:	00000009.00000002.870781046.00007DF5F6580000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6580000
Size:	4096

Details

Name:	00000009.00000002.870692523.000001F8AD681000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD681000
Size:	65536

Details

Name:	00000013.00000002.1032125426.0000012C0E730000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0E730000
Size:	4096

Details

Name:	00000013.00000003.1022460496.0000012C0F197000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F197000
Size:	12288

Details

Name:	00000004.00000002.862550973.0000000002E30000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E30000
Size:	4096

Details

Name:	00000005.00000002.866607503.0000000001E46000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E46000
Size:	16384

Details

Name:	00000005.00000002.866468438.0000000001CF4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1CF4000
Size:	8192

Details

Name:	0000000D.00000002.950672538.00007FF54DD27000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD27000
Size:	28672

Details

Name:	0000000F.00000002.987281632.00007FF52279D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52279D000
Size:	16384

Details

Name:	00000002.00000003.831661896.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.832097627.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000004.00000002.862289144.0000000002BB0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB0000
Size:	12288

Details

Name:	00000002.00000003.830456306.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.1147949241.000000000319D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	319D000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.987058358.00007FF52266D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52266D000
Size:	20480

Details

Name:	0000000F.00000003.986344731.000001FDF885A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF885A000
Size:	8192

Details

Name:	00000013.00000002.1032974120.00007FF5945C6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5945C6000
Size:	4096

Details

Name:	00000013.00000003.1014378662.0000012C0F1BE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1BE000
Size:	147456

Details

Name:	00000002.00000003.841742844.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000005.00000002.866814273.00000000026B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26B0000
Size:	4096

Details

Name:	0000000F.00000002.986986090.00007FF5222E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5222E0000
Size:	20480

Details

Name:	00000005.00000002.866850542.00000000026F8000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	26F8000
Size:	28672

Details

Name:	00000009.00000000.858315140.00007DF5F6592000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6592000
Size:	4096

Details

Name:	00000005.00000002.866763446.0000000002500000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2500000
Size:	20480

Details

Name:	00000003.00000003.843452021.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000004.00000002.861670458.000000000270C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270C000
Size:	8192

Details

Name:	00000005.00000002.867109090.00000000029C0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29C0000
Size:	20480

Details

Name:	00000003.00000002.1191538378.0000000002ED0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ED0000
Size:	4096

Details

Name:	00000000.00000002.1190889416.0000000000E7F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E7F000
Size:	4096

Details

Name:	00000009.00000002.870970560.00007FF5E1454000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1454000
Size:	4096

Details

Name:	00000003.00000002.1191470834.0000000002BE0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2BE0000
Size:	4096

Details

Name:	00000002.00000003.809494962.000000000356C000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	356C000
Size:	8192

Details

Name:	00000004.00000002.861789454.000000000273A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	273A000
Size:	16384

Details

Name:	00000009.00000000.858275598.000001F8AD480000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8AD480000
Size:	102400

Details

Name:	00000013.00000002.1032737755.00007DF4A7840000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A7840000
Size:	20480

Details

Name:	00000002.00000003.809514704.000000000356F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	356F000
Size:	12288

Details

Name:	00000002.00000003.839498879.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.1058300470.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.949953575.000000222097B000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	222097B000
Size:	20480

Details

Name:	00000003.00000003.831695712.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000002.00000002.855701072.000000007F300000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F300000
Size:	20480

Details

Name:	00000009.00000002.870728452.000001F8AD713000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD713000
Size:	12288

Details

Name:	00000004.00000002.861728569.000000000272D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	272D000
Size:	4096

Details

Name:	00000002.00000002.854365068.0000000002C94000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C94000
Size:	28672

Details

Name:	00000013.00000002.1032862268.00007FF594362000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594362000
Size:	4096

Details

Name:	00000005.00000002.867265536.000000007F1D2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1D2000
Size:	4096

Details

Name:	00000003.00000003.841007192.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000009.00000002.870798604.00007DF5F6592000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6592000
Size:	4096

Details

Name:	00000003.00000003.822419003.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000002.1032192960.0000012C0E83C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E83C000
Size:	53248

Details

Name:	00000003.00000002.1191251922.00000000027A5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A5000
Size:	32768

Details

Name:	00000005.00000002.866554285.0000000001E15000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E15000
Size:	4096

Details

Name:	00000003.00000002.1193873578.000000007F620000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F620000
Size:	12288

Details

Name:	00000005.00000002.867260096.000000007F1D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1D0000
Size:	4096

Details

Name:	00000004.00000002.861651506.0000000002703000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2703000
Size:	28672

Details

Name:	00000003.00000002.1193856603.000000007F612000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F612000
Size:	4096

Details

Name:	00000003.00000002.1191637536.0000000003030000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3030000
Size:	65536

Details

Name:	0000000F.00000002.987100933.00007FF52271A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52271A000
Size:	8192

Details

Name:	00000000.00000002.1192868989.000000006E48F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E48F000
Size:	16384

Details

Name:	0000000D.00000002.950301476.00000204F6513000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6513000
Size:	12288

Details

Name:	00000002.00000003.853272861.000000000357A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	357A000
Size:	57344

Details

Name:	00000003.00000003.844489817.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1191277789.00000000027BC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27BC000
Size:	12288

Details

Name:	00000013.00000000.1006543431.00007DF5A9972000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9972000
Size:	4096

Details

Name:	0000000D.00000003.949696798.00000204F644B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	204F644B000
Size:	114688

Details

Name:	00000013.00000002.1033186257.00007FF59476C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59476C000
Size:	8192

Details

Name:	00000013.00000002.1033172798.00007FF594764000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594764000
Size:	4096

Details

Name:	00000014.00000000.1007680183.00000156158C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	156158C0000
Size:	102400

Details

Name:	0000000D.00000000.934927950.00007DF562E80000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E80000
Size:	12288

Details

Name:	0000000F.00000002.986925871.00007DF537892000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF537892000
Size:	4096

Details

Name:	00000014.00000003.1019050787.0000015615A5D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A5D000
Size:	8192

Details

Name:	0000000F.00000002.987081940.00007FF52268C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52268C000
Size:	8192

Details

Name:	00000004.00000002.862777677.0000000002F1C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F1C000
Size:	4096

Details

Name:	0000000D.00000002.950175191.00000204F6413000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6413000
Size:	57344

Details

Name:	00000000.00000002.1190726746.0000000000BCC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BCC000
Size:	16384

Details

Name:	00000004.00000002.861460199.00000000026C9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26C9000
Size:	12288

Details

Name:	00000003.00000002.1191585193.0000000002FCD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FCD000
Size:	12288

Details

Name:	00000000.00000000.666039263.000000007FCE2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE2000
Size:	4096

Details

Name:	00000003.00000003.1102459381.00000000031A9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A9000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.909588960.00000000036D9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	36D9000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.862325649.0000000002E00000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E00000
Size:	32768

Details

Name:	0000000F.00000000.975070549.00007DF5378B0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5378B0000
Size:	12288

Details

Name:	00000000.00000003.1135018714.0000000001531000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1531000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.844018587.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000000.666053784.000000007FCF0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCF0000
Size:	12288

Details

Name:	0000000D.00000002.950282451.00000204F6500000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6500000
Size:	4096

Details

Name:	00000013.00000002.1033345597.00007FF5947EA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947EA000
Size:	4096

Details

Name:	0000000D.00000002.950470329.00007FF54DB41000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB41000
Size:	12288

Details

Name:	0000000F.00000002.986919203.00007DF537890000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF537890000
Size:	4096

Details

Name:	00000013.00000003.1013312041.0000012C0F1B7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B7000
Size:	94208

Details

Name:	00000002.00000000.667459949.000000007F402000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F402000
Size:	4096

Details

Name:	0000000D.00000002.950685722.00007FF54DD34000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD34000
Size:	4096

Details

Name:	00000003.00000002.1190932478.00000000026B2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B2000
Size:	4096

Details

Name:	00000009.00000002.870907792.00007FF5E13FA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E13FA000
Size:	4096

Details

Name:	00000002.00000002.854444566.0000000003310000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3310000
Size:	16384

Details

Name:	00000005.00000000.685986543.0000000000090000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	90000
Size:	102400

Details

Name:	00000005.00000003.832385906.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000002.00000003.843919673.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	0000000D.00000002.950357859.00007DF562E70000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E70000
Size:	4096

Details

Name:	00000000.00000003.908391205.0000000001516000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1516000
Size:	4096

Details

Name:	00000002.00000002.854529871.000000000351A000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	351A000
Size:	12288

Details

Name:	0000000D.00000002.950533336.00007FF54DC54000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC54000
Size:	4096

Details

Name:	00000009.00000002.870214972.000001F8AD5B0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8AD5B0000
Size:	16384

Details

Name:	00000013.00000002.1033466889.00007FF59480B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59480B000
Size:	45056

Details

Name:	00000005.00000002.867131582.00000000029D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D0000
Size:	36864

Details

Name:	00000013.00000002.1033620516.00007FF594844000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594844000
Size:	4096

Details

Name:	00000003.00000003.820813674.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1190856054.0000000002612000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2612000
Size:	4096

Details

Name:	00000014.00000002.1019199886.0000001A8AC7E000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1A8AC7E000
Size:	8192

Details

Name:	0000000D.00000002.950719712.00007FF54DD4F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD4F000
Size:	8192

Details

Name:	00000000.00000003.955964949.000000000375B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	375B000
Size:	8192

Details

Name:	00000013.00000003.1031778259.0000012C0E849000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E849000
Size:	8192

Details

Name:	00000004.00000003.832538525.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000005.00000002.867097217.00000000029AF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AF000
Size:	4096

Details

Name:	00000009.00000002.870765303.000001F8ADE02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8ADE02000
Size:	4096

Details

Name:	00000013.00000002.1032566170.0000012C0F113000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F113000
Size:	229376

Details

Name:	00000013.00000002.1033208398.00007FF5947A0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947A0000
Size:	4096

Details

Name:	00000014.00000002.1019173689.0000001A8A89A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A8A89A000
Size:	24576

Details

Name:	00000003.00000003.842246846.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000004.00000002.863253925.000000007FDB0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDB0000
Size:	12288

Details

Name:	0000000D.00000002.950638877.00007FF54DD07000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD07000
Size:	49152

Details

Name:	00000003.00000003.821213634.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	0000000D.00000002.950439850.00007FF54D8B6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D8B6000
Size:	32768

Details

Name:	0000000F.00000002.987112138.00007FF522720000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522720000
Size:	16384

Details

Name:	00000003.00000002.1191573552.0000000002F45000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F45000
Size:	12288

Details

Name:	00000004.00000002.862039996.0000000002A40000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A40000
Size:	102400

Details

Name:	00000003.00000002.1193379036.000000006E413000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E413000
Size:	4096

Details

Name:	00000005.00000002.866582854.0000000001E2A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E2A000
Size:	16384

Details

Name:	00000004.00000002.862314057.0000000002CB8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB8000
Size:	12288

Details

Name:	00000003.00000002.1191143586.000000000272F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	272F000
Size:	8192

Details

Name:	00000000.00000003.908426824.00000000014AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14AD000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000013.00000003.1014350406.0000012C0F1BE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1BE000
Size:	147456

Details

Name:	00000004.00000002.863016916.0000000006580000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6580000
Size:	733184

Details

Name:	00000003.00000003.844730735.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000003.1022438334.0000012C0F172000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F172000
Size:	77824

Details

Name:	00000004.00000002.861816635.000000000273F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	273F000
Size:	4096

Details

Name:	0000000F.00000002.986846625.000001FDF8908000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8908000
Size:	24576

Details

Name:	00000005.00000003.831357846.000000000270A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A000
Size:	86016

Details

Name:	00000003.00000003.1102531744.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.1190826388.0000000000E71000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	E71000
Size:	45056

Details

Name:	00000003.00000003.833136206.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000002.867187652.0000000005F20000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5F20000
Size:	8192

Details

Name:	0000000D.00000000.934864626.00000204F6250000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6250000
Size:	102400

Details

Name:	00000004.00000002.862293826.0000000002BC0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000002.1190753223.0000000000BE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BE0000
Size:	4096

Details

Name:	00000013.00000002.1032727784.0000012C0F700000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F700000
Size:	8192

Details

Name:	00000000.00000002.1190697827.0000000000B70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	102400

Details

Name:	00000000.00000002.1190926119.0000000000E80000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E80000
Size:	16384

Details

Name:	00000003.00000003.876700032.000000000313C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	313C000
Size:	4096

Details

Name:	00000003.00000002.1191153037.0000000002733000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2733000
Size:	12288

Details

Name:	00000005.00000002.866519282.0000000001DEC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DEC000
Size:	12288

Details

Name:	00000013.00000003.1011882544.0000012C0F18C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F18C000
Size:	110592

Details

Name:	00000003.00000003.839582377.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	0000000F.00000000.975096408.00007FF522812000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522812000
Size:	16384

Details

Name:	00000013.00000002.1033126525.00007FF594708000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594708000
Size:	4096

Details

Name:	0000000F.00000002.987194922.00007FF522788000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522788000
Size:	12288

Details

Name:	00000004.00000003.832133301.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000000.00000003.864392083.00000000014C5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14C5000
Size:	4096

Details

Name:	0000000F.00000002.986634918.000001FDF8670000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FDF8670000
Size:	4096

Details

Name:	00000003.00000003.829676731.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000014.00000002.1019448798.0000015615FC0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15615FC0000
Size:	4096

Details

Name:	00000003.00000002.1190941768.00000000026C9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26C9000
Size:	8192

Details

Name:	0000000D.00000002.950761554.00007FF54DD69000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD69000
Size:	12288

Details

Name:	00000003.00000003.1147483655.0000000005AC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.841208537.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000002.866566046.0000000001E1D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E1D000
Size:	4096

Details

Name:	00000003.00000003.1014240408.0000000003146000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3146000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.1032870164.00007FF59436E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59436E000
Size:	12288

Details

Name:	00000009.00000002.870127095.000000D4312FC000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D4312FC000
Size:	16384

Details

Name:	00000009.00000002.870975077.00007FF5E145A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E145A000
Size:	20480

Details

Name:	0000000D.00000002.950368505.00007DF562E80000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E80000
Size:	12288

Details

Name:	00000004.00000002.861760939.000000000272F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	272F000
Size:	8192

Details

Name:	00000004.00000002.863135646.00000000069FC000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	69FC000
Size:	16384

Details

Name:	00000000.00000002.1191737348.0000000003360000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3360000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.1019685068.00007FF52AADA000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AADA000
Size:	12288

Details

Name:	0000000D.00000002.950352494.00007DF562E62000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E62000
Size:	4096

Details

Name:	0000000F.00000002.986579453.000000B9C047B000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C047B000
Size:	20480

Details

Name:	00000003.00000003.837124418.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000002.1031965842.000000032CB77000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CB77000
Size:	36864

Details

Name:	00000013.00000003.1014433280.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	147456

Details

Name:	00000000.00000003.1135759021.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	00000005.00000002.867282736.000000007F1F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1F0000
Size:	12288

Details

Name:	00000003.00000002.1190740636.00000000025C6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C6000
Size:	8192

Details

Name:	00000004.00000002.862481133.0000000002E28000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E28000
Size:	28672

Details

Name:	00000000.00000002.1191695246.000000000330D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	330D000
Size:	12288

Details

Name:	00000003.00000003.834073369.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000003.863270094.00000000014D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14D0000
Size:	253952

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.867026631.000000000294E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	294E000
Size:	8192

Details

Name:	00000002.00000003.837992150.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000004.00000002.861830016.0000000002741000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2741000
Size:	16384

Details

Name:	00000005.00000000.686017225.000000007F1E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E0000
Size:	4096

Details

Name:	00000009.00000002.870741370.000001F8ADA00000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8ADA00000
Size:	12288

Details

Name:	00000009.00000002.870866161.00007FF5E12B3000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E12B3000
Size:	8192

Details

Name:	00000009.00000002.870995108.00007FF5E1478000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1478000
Size:	12288

Details

Name:	00000013.00000003.1013056092.0000012C0F1CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CE000
Size:	90112

Details

Name:	00000002.00000002.855643507.0000000006B30000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6B30000
Size:	8192

Details

Name:	0000000D.00000002.950613973.00007FF54DCFB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCFB000
Size:	45056

Details

Name:	00000013.00000002.1032456728.0000012C0EF30000.00000008.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	12C0EF30000
Size:	266240

Details

Name:	00000000.00000003.952568905.0000000001519000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1519000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.1032769848.00007DF5A9982000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9982000
Size:	4096

Details

Name:	00000002.00000003.828849289.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.841140554.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	0000000F.00000002.987296342.00007FF52280A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52280A000
Size:	12288

Details

Name:	00000002.00000003.826839688.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000003.1031719714.0000012C0E853000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E853000
Size:	110592

Details

Name:	00000000.00000003.834414791.0000000000E50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	E50000
Size:	4096

Details

Name:	00000003.00000002.1191695911.0000000003050000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3050000
Size:	4096

Details

Name:	00000014.00000002.1019632929.00007FF52AA4E000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA4E000
Size:	12288

Details

Name:	0000000F.00000002.987033429.00007FF5225E1000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5225E1000
Size:	8192

Details

Name:	00000000.00000002.1192970921.000000007FCF0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCF0000
Size:	12288

Details

Name:	00000003.00000003.1014889091.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	28672

Details

Name:	00000009.00000002.870870771.00007FF5E12D1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E12D1000
Size:	8192

Details

Name:	00000004.00000000.676759461.000000007FD90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD90000
Size:	4096

Details

Name:	00000002.00000002.854192960.0000000002C0D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C0D000
Size:	4096

Details

Name:	0000000F.00000002.986647678.000001FDF8690000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF8690000
Size:	102400

Details

Name:	00000014.00000002.1019365210.0000015615C30000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	15615C30000
Size:	12288

Details

Name:	00000000.00000002.1192010656.000000000432E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	432E000
Size:	8192

Details

Name:	00000005.00000003.833500711.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000002.00000003.841173438.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.842816264.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000003.866191481.00000000041D0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	41D0000
Size:	4096

Details

Name:	00000014.00000002.1019259948.00000156158E0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	156158E0000
Size:	12288

Details

Name:	00000003.00000003.879467549.000000000313C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	313C000
Size:	12288

Details

Name:	0000000D.00000000.934918911.00007DF562E72000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E72000
Size:	4096

Details

Name:	00000000.00000003.1135741494.0000000001533000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1533000
Size:	4096

Details

Name:	00000004.00000003.860572475.0000000004A20000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4A20000
Size:	4096

Details

Name:	00000003.00000003.830489880.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000002.1192816550.000000006E477000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E477000
Size:	8192

Details

Name:	00000002.00000003.853309436.000000000356F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	356F000
Size:	40960

Details

Name:	00000004.00000002.863214940.000000007FD90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD90000
Size:	4096

Details

Name:	00000000.00000003.953002124.000000000151E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	151E000
Size:	24576

Details

Name:	00000002.00000002.854508857.0000000003510000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3510000
Size:	20480

Details

Name:	00000013.00000002.1032628379.0000012C0F16D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F16D000
Size:	20480

Details

Name:	0000000D.00000002.950547948.00007FF54DCDA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCDA000
Size:	4096

Details

Name:	00000013.00000003.1019722464.0000012C0F19F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19F000
Size:	397312

Details

Name:	00000002.00000003.832063902.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.1147573673.0000000005B38000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B38000
Size:	4096

Details

Name:	00000003.00000002.1192102978.00000000031C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31C0000
Size:	36864

Details

Name:	00000009.00000003.869776025.000001F8AD674000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD674000
Size:	36864

Details

Name:	00000005.00000003.831476884.00000000026A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26A0000
Size:	4096

Details

Name:	00000013.00000002.1032392621.0000012C0E908000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E908000
Size:	28672

Details

Name:	00000005.00000003.831271784.00000000024E0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	24E0000
Size:	4096

Details

Name:	00000000.00000003.1135733256.0000000004762000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4762000
Size:	4096

Details

Name:	00000003.00000003.1148325009.00000000031A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A4000
Size:	8192

Details

Name:	00000005.00000002.866537994.0000000001E00000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E00000
Size:	32768

Details

Name:	00000005.00000002.866705246.000000000217B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	217B000
Size:	20480

Details

Name:	00000005.00000002.866484351.0000000001DB9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB9000
Size:	12288

Details

Name:	0000000F.00000002.986853878.000001FDF8913000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8913000
Size:	12288

Details

Name:	0000000F.00000002.987094277.00007FF52270C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52270C000
Size:	8192

Details

Name:	00000013.00000003.1020714669.0000012C0F1BF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1BF000
Size:	61440

Details

Name:	0000000F.00000000.975045791.00007DF537890000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF537890000
Size:	4096

Details

Name:	00000005.00000002.867233499.00000000067B8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	67B8000
Size:	12288

Details

Name:	00000003.00000000.667790774.00000000027D3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D3000
Size:	16384

Details

Name:	00000003.00000002.1191459078.0000000002BB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB0000
Size:	12288

Details

Name:	00000009.00000000.858309282.00007DF5F6590000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6590000
Size:	4096

Details

Name:	0000000D.00000002.950507139.00007FF54DBEE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBEE000
Size:	4096

Details

Name:	00000003.00000002.1191076584.0000000002710000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2710000
Size:	32768

Details

Name:	0000000D.00000002.950463417.00007FF54DAA4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DAA4000
Size:	4096

Details

Name:	00000005.00000000.686025178.000000007F1F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1F0000
Size:	12288

Details

Name:	00000005.00000002.866577171.0000000001E23000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E23000
Size:	12288

Details

Name:	00000000.00000002.1191583530.0000000002D5E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2D5E000
Size:	8192

Details

Name:	00000000.00000003.1134933373.00000000046F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	46F1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1013547213.0000000005B38000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B38000
Size:	4096

Details

Name:	00000000.00000003.863879923.00000000014D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14D0000
Size:	258048

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.987288417.00007FF522804000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522804000
Size:	20480

Details

Name:	00000003.00000003.879476356.0000000003143000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3143000
Size:	8192

Details

Name:	00000003.00000003.829251277.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000002.00000003.827643224.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1032949882.00007FF5945B4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5945B4000
Size:	4096

Details

Name:	00000003.00000003.827241224.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000002.867277788.000000007F1E2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E2000
Size:	4096

Details

Name:	00000003.00000002.1191136298.000000000272D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	272D000
Size:	4096

Details

Name:	00000002.00000003.825634322.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000000.1006572390.00007DF5A9990000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9990000
Size:	12288

Details

Name:	00000013.00000003.1018362544.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	425984

Details

Name:	0000000D.00000002.949933914.000000222051B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	222051B000
Size:	20480

Details

Name:	00000000.00000003.1136136782.000000000153B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153B000
Size:	4096

Details

Name:	00000009.00000002.870931921.00007FF5E1415000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1415000
Size:	12288

Details

Name:	00000003.00000002.1192835941.0000000004FFD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FFD000
Size:	12288

Details

Name:	00000013.00000003.1016516505.0000012C0F1B8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B8000
Size:	65536

Details

Name:	0000000F.00000003.986337941.000001FDF885C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF885C000
Size:	20480

Details

Name:	00000003.00000003.923378697.000000000313D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	313D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.950192530.00000204F6422000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6422000
Size:	28672

Details

Name:	00000002.00000002.853642465.0000000002BDC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDC000
Size:	12288

Details

Name:	00000004.00000002.862897549.0000000003010000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3010000
Size:	4096

Details

Name:	00000003.00000002.1191098512.0000000002719000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2719000
Size:	40960

Details

Name:	00000004.00000002.862995266.000000000492D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	492D000
Size:	12288

Details

Name:	00000005.00000002.867153113.0000000004020000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4020000
Size:	4096

Details

Name:	00000004.00000002.863220371.000000007FD92000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD92000
Size:	4096

Details

Name:	00000003.00000002.1190792913.00000000025F4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25F4000
Size:	8192

Details

Name:	00000013.00000002.1032299353.0000012C0E8AE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8AE000
Size:	57344

Details

Name:	00000000.00000003.1135444652.0000000001514000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1514000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1191547173.0000000002F00000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2F00000
Size:	4096

Details

Name:	00000004.00000002.861704566.0000000002725000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2725000
Size:	4096

Details

Name:	00000014.00000002.1019356358.0000015615B30000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15615B30000
Size:	16384

Details

Name:	00000000.00000002.1192063438.000000000456F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	456F000
Size:	4096

Details

Name:	00000000.00000003.1135364274.0000000004762000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4762000
Size:	4096

Details

Name:	00000002.00000003.853227989.00000000051F8000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	51F8000
Size:	4096

Details

Name:	00000009.00000002.870712916.000001F8AD702000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD702000
Size:	12288

Details

Name:	0000000D.00000002.950433829.00007FF54D8B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D8B0000
Size:	20480

Details

Name:	00000009.00000002.870903806.00007FF5E137C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E137C000
Size:	8192

Details

Name:	00000014.00000002.1019206588.0000001A8ACF9000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1A8ACF9000
Size:	28672

Details

Name:	00000013.00000002.1032413158.0000012C0E916000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E916000
Size:	8192

Details

Name:	00000005.00000002.866617266.0000000001E4B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E4B000
Size:	49152

Details

Name:	00000002.00000002.855662810.0000000006E80000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E80000
Size:	4096

Details

Name:	00000003.00000002.1192786641.0000000004FBB000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FBB000
Size:	20480

Details

Name:	00000003.00000002.1191045414.00000000026FC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26FC000
Size:	12288

Details

Name:	00000013.00000003.1022415422.0000012C0F19A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19A000
Size:	16384

Details

Name:	00000004.00000003.833739786.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000002.00000002.853487314.0000000002AF5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF5000
Size:	12288

Details

Name:	00000014.00000002.1019192766.0000001A8A99F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1A8A99F000
Size:	4096

Details

Name:	0000000F.00000002.987302916.00007FF522811000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522811000
Size:	20480

Details

Name:	00000003.00000002.1193115980.00000000058BF000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	58BF000
Size:	4096

Details

Name:	00000005.00000002.866427432.00000000000B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B0000
Size:	16384

Details

Name:	00000003.00000003.833671413.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000000.686021532.000000007F1E2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E2000
Size:	4096

Details

Name:	0000000F.00000003.986308670.000001FDF887C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF887C000
Size:	36864

Details

Name:	00000003.00000002.1191601581.000000000300E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	300E000
Size:	8192

Details

Name:	00000013.00000002.1033271275.00007FF5947B3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947B3000
Size:	4096

Details

Name:	00000000.00000002.1190776283.0000000000D38000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D38000
Size:	4096

Details

Name:	00000013.00000002.1032755847.00007DF5A9972000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9972000
Size:	4096

Details

Name:	00000005.00000002.867146672.000000000401E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	401E000
Size:	8192

Details

Name:	00000013.00000002.1032763096.00007DF5A9980000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9980000
Size:	4096

Details

Name:	00000000.00000000.666021456.000000007FCD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	4096

Details

Name:	00000003.00000003.968607862.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	28672

Details

Name:	00000013.00000000.1006535426.00007DF5A9970000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9970000
Size:	4096

Details

Name:	00000000.00000003.908397216.0000000001519000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1519000
Size:	40960

Details

Name:	00000005.00000002.866440177.0000000001C93000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93000
Size:	4096

Details

Name:	00000003.00000002.1191479500.0000000002BE1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	2BE1000
Size:	45056

Details

Name:	00000000.00000002.1190855303.0000000000E7D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	E7D000
Size:	8192

Details

Name:	0000000F.00000002.986810068.000001FDF888A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF888A000
Size:	24576

Details

Name:	00000013.00000000.1006625100.00007FF5948F2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5948F2000
Size:	16384

Details

Name:	00000009.00000002.870137151.000001F8AD460000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1F8AD460000
Size:	4096

Details

Name:	00000005.00000002.866713677.00000000021B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21B0000
Size:	4096

Details

Name:	00000013.00000003.1014308620.0000012C0F1B6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B6000
Size:	73728

Details

Name:	00000004.00000003.829723517.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000003.00000001.668094081.000000006E410000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000013.00000003.1011922787.0000012C0F1CC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CC000
Size:	118784

Details

Name:	00000004.00000002.861418509.00000000025D8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D8000
Size:	12288

Details

Name:	00000009.00000002.871093509.00007FF5E14FA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E14FA000
Size:	12288

Details

Name:	00000003.00000003.830891642.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1191167594.000000000273A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	273A000
Size:	16384

Details

Name:	0000000D.00000002.950697487.00007FF54DD3A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD3A000
Size:	20480

Details

Name:	00000000.00000002.1191453196.00000000018C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18C0000
Size:	4096

Details

Name:	00000013.00000003.1031764675.0000012C0E84B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E84B000
Size:	8192

Details

Name:	00000013.00000003.1009012328.0000012C0E7F0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E7F0000
Size:	4096

Details

Name:	00000004.00000003.834140332.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000009.00000002.870988864.00007FF5E146F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E146F000
Size:	8192

Details

Name:	00000014.00000002.1019498183.00007DF53FB80000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB80000
Size:	12288

Details

Name:	00000002.00000002.854398992.0000000002F20000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F20000
Size:	102400

Details

Name:	00000014.00000002.1019592196.00007FF52AA1F000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA1F000
Size:	16384

Details

Name:	00000002.00000002.853469715.0000000002AB8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AB8000
Size:	12288

Details

Name:	0000000F.00000002.986888065.000001FDF9002000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF9002000
Size:	4096

Details

Name:	00000013.00000002.1033242017.00007FF5947A2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947A2000
Size:	24576

Details

Name:	00000003.00000003.826035723.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000004.00000002.862280043.0000000002B80000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2B80000
Size:	4096

Details

Name:	00000000.00000003.833501795.0000000000E50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	E50000
Size:	4096

Details

Name:	00000002.00000002.854534849.0000000003520000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3520000
Size:	4096

Details

Name:	00000014.00000002.1019668349.00007FF52AA6D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA6D000
Size:	16384

Details

Name:	00000004.00000002.863206813.000000007FC90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC90000
Size:	20480

Details

Name:	00000004.00000002.861848526.0000000002756000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2756000
Size:	16384

Details

Name:	00000013.00000002.1032223146.0000012C0E86F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E86F000
Size:	40960

Details

Name:	00000000.00000003.955849785.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	733184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.1135775483.0000000001530000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1530000
Size:	12288

Details

Name:	00000003.00000002.1191019190.00000000026EB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26EB000
Size:	8192

Details

Name:	00000002.00000003.842278648.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000000.00000002.1191416659.0000000001740000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1740000
Size:	69632

Details

Name:	0000000D.00000002.950093978.00000204F62A0000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	204F62A0000
Size:	8192

Details

Name:	00000000.00000002.1191976329.00000000041AA000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	41AA000
Size:	24576

Details

Name:	00000004.00000003.831729864.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000000.00000003.1000893910.000000000149A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	149A000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.1020733884.0000012C0F1BF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1BF000
Size:	61440

Details

Name:	00000005.00000002.866633402.0000000001E91000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E91000
Size:	12288

Details

Name:	00000013.00000003.1018413630.0000012C0F702000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F702000
Size:	425984

Details

Name:	0000000F.00000002.987015066.00007FF5224D4000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5224D4000
Size:	4096

Details

Name:	00000013.00000002.1033400765.00007FF5947FE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947FE000
Size:	4096

Details

Name:	0000000D.00000002.950258121.00000204F6468000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6468000
Size:	28672

Details

Name:	00000009.00000002.870628864.000001F8AD63C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD63C000
Size:	81920

Details

Name:	00000000.00000002.1190787649.0000000000E30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E30000
Size:	8192

Details

Name:	00000002.00000002.853481128.0000000002AE4000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE4000
Size:	8192

Details

Name:	00000013.00000002.1033711774.00007FF594868000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594868000
Size:	12288

Details

Name:	00000005.00000002.866560545.0000000001E17000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E17000
Size:	12288

Details

Name:	00000005.00000002.866433496.00000000000C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C0000
Size:	4096

Details

Name:	00000002.00000002.855155383.0000000004DD0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	4096

Details

Name:	00000003.00000002.1191562745.0000000002F40000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F40000
Size:	16384

Details

Name:	00000003.00000003.824026551.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000003.1015363421.0000012C0F15F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F15F000
Size:	36864

Details

Name:	00000003.00000002.1191119096.0000000002725000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2725000
Size:	4096

Details

Name:	0000000F.00000002.986536934.000000B9BFF5C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B9BFF5C000
Size:	16384

Details

Name:	00000000.00000002.1191925305.0000000003EAF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3EAF000
Size:	4096

Details

Name:	00000013.00000002.1032088476.0000012C0E6F0000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	12C0E6F0000
Size:	4096

Details

Name:	0000000F.00000002.987027553.00007FF5225C3000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5225C3000
Size:	8192

Details

Name:	00000004.00000002.861873670.00000000027A1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A1000
Size:	12288

Details

Name:	0000000D.00000002.950419653.00007FF54D547000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D547000
Size:	16384

Details

Name:	00000014.00000003.1019016715.0000015615A45000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A45000
Size:	32768

Details

Name:	00000014.00000002.1019600193.00007FF52AA28000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA28000
Size:	24576

Details

Name:	00000000.00000002.1191025288.0000000001230000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1230000
Size:	4096

Details

Name:	00000004.00000000.676770049.000000007FDA2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDA2000
Size:	4096

Details

Name:	0000000D.00000002.950663052.00007FF54DD1F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD1F000
Size:	16384

Details

Name:	00000013.00000002.1033655138.00007FF59484A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59484A000
Size:	20480

Details

Name:	00000002.00000002.854378233.0000000002CA8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA8000
Size:	12288

Details

Name:	00000002.00000003.840972837.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000003.1014301723.0000012C0F1AB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1AB000
Size:	4096

Details

Name:	00000002.00000003.844389796.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000000.00000000.666029302.000000007FCD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD2000
Size:	4096

Details

Name:	00000013.00000002.1031985995.000000032CD7F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CD7F000
Size:	4096

Details

Name:	00000003.00000002.1192280768.0000000004A00000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4A00000
Size:	4096

Details

Name:	0000000D.00000002.950540531.00007FF54DC5C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC5C000
Size:	8192

Details

Name:	00000004.00000002.862257139.0000000002AE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	16384

Details

Name:	00000002.00000002.853669810.0000000002BEC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	8192

Details

Name:	0000000D.00000002.950036268.00000204F6240000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	204F6240000
Size:	4096

Details

Name:	00000002.00000003.834073756.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1033308728.00007FF5947D4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947D4000
Size:	16384

Details

Name:	00000009.00000002.870926095.00007FF5E1410000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1410000
Size:	16384

Details

Name:	00000013.00000002.1032378327.0000012C0E902000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E902000
Size:	16384

Details

Name:	00000013.00000003.1019485753.0000012C0F19F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19F000
Size:	53248

Details

Name:	00000003.00000002.1191032452.00000000026F5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F5000
Size:	20480

Details

Name:	00000009.00000002.870982595.00007FF5E1464000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1464000
Size:	20480

Details

Name:	00000009.00000002.870922061.00007FF5E140E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E140E000
Size:	4096

Details

Name:	00000004.00000002.862246355.0000000002ADB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ADB000
Size:	20480

Details

Name:	00000013.00000003.1019464033.0000012C0F1B1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B1000
Size:	90112

Details

Name:	00000005.00000001.687252029.000000006E410000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000005.00000002.866503832.0000000001DD6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD6000
Size:	4096

Details

Name:	00000002.00000003.840034473.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.840077126.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000003.1019552939.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	106496

Details

Name:	00000000.00000003.861334972.0000000002D70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D70000
Size:	4096

Details

Name:	00000003.00000003.968532502.000000000319B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	319B000
Size:	32768

Details

Name:	00000005.00000002.867053526.00000000029A0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	29A0000
Size:	4096

Details

Name:	00000013.00000002.1032054370.000000032D17B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32D17B000
Size:	20480

Details

Name:	00000013.00000003.1008723948.0000012C0E89E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E89E000
Size:	4096

Details

Name:	00000000.00000002.1192255848.00000000046F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	46F0000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.828045074.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000002.1032344501.0000012C0E8DF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8DF000
Size:	45056

Details

Name:	00000000.00000003.832971983.0000000000E50000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	E50000
Size:	4096

Details

Name:	00000002.00000002.854914470.0000000004D4D000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D4D000
Size:	12288

Details

Name:	00000003.00000003.1013605318.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1193173701.000000000597D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	597D000
Size:	12288

Details

Name:	00000013.00000002.1032320619.0000012C0E8C5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8C5000
Size:	65536

Details

Name:	00000009.00000002.870090617.000000D430FFB000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D430FFB000
Size:	20480

Details

Name:	00000003.00000002.1190752545.00000000025E2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25E2000
Size:	16384

Details

Name:	00000002.00000002.853688171.0000000002BF0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF0000
Size:	32768

Details

Name:	00000004.00000002.862236049.0000000002A9A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A9A000
Size:	24576

Details

Name:	00000002.00000002.854448744.0000000003330000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3330000
Size:	4096

Details

Name:	0000000F.00000002.986822378.000001FDF8902000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8902000
Size:	12288

Details

Name:	00000000.00000002.1191680024.00000000032CE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CE000
Size:	8192

Details

Name:	00000009.00000002.870788255.00007DF5F6582000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6582000
Size:	4096

Details

Name:	00000002.00000003.833872640.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1192912419.00000000050BD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50BD000
Size:	12288

Details

Name:	00000004.00000000.676766712.000000007FDA0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDA0000
Size:	4096

Details

Name:	00000005.00000002.866508664.0000000001DDB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DDB000
Size:	4096

Details

Name:	00000009.00000002.870847470.00007FF5E0FE5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E0FE5000
Size:	4096

Details

Name:	00000013.00000002.1032887758.00007FF5943C0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5943C0000
Size:	20480

Details

Name:	00000013.00000002.1032140347.0000012C0E760000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0E760000
Size:	16384

Details

Name:	00000000.00000003.833010965.0000000000E50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	E50000
Size:	4096

Details

Name:	00000004.00000002.863148482.0000000006B40000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6B40000
Size:	4096

Details

Name:	00000009.00000002.871078128.00007FF5E148D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E148D000
Size:	16384

Details

Name:	00000004.00000002.861835859.0000000002752000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2752000
Size:	8192

Details

Name:	00000002.00000003.822821540.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000005.00000002.866524539.0000000001DF3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DF3000
Size:	28672

Details

Name:	00000013.00000002.1032541498.0000012C0F100000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F100000
Size:	53248

Details

Name:	00000013.00000003.1019638978.0000012C0F19F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19F000
Size:	319488

Details

Name:	0000000D.00000002.950484953.00007FF54DBB1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBB1000
Size:	8192

Details

Name:	00000014.00000002.1019475524.00007DF53FB62000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB62000
Size:	4096

Details

Name:	00000000.00000003.1001719581.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	0000000F.00000002.986769640.000001FDF883C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF883C000
Size:	98304

Details

Name:	00000002.00000002.853459113.0000000002AAD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AAD000
Size:	32768

Details

Name:	00000002.00000003.822418630.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000005.00000002.866891015.00000000027D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D0000
Size:	733184

Details

Name:	00000000.00000003.954031091.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.854299077.0000000002C21000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C21000
Size:	16384

Details

Name:	00000009.00000002.870830541.00007FF5E0FD0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E0FD0000
Size:	20480

Details

Name:	00000014.00000002.1019572205.00007FF52A9FB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A9FB000
Size:	20480

Details

Name:	0000000D.00000002.950060959.00000204F6270000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6270000
Size:	12288

Details

Name:	00000003.00000003.824829998.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000002.866800206.0000000002690000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2690000
Size:	4096

Details

Name:	00000000.00000002.1192495812.000000006E420000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E420000
Size:	135168

Details

Name:	0000000F.00000002.986881819.000001FDF8D80000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF8D80000
Size:	4096

Details

Name:	0000000D.00000002.949941862.000000222059E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	222059E000
Size:	8192

Details

Name:	00000013.00000003.1016629269.0000012C0F1DD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1DD000
Size:	69632

Details

Name:	0000000D.00000002.950748703.00007FF54DD66000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD66000
Size:	8192

Details

Name:	00000003.00000003.923384193.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	307200

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.853844090.0000000002BF9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF9000
Size:	40960

Details

Name:	0000000D.00000002.949948106.000000222087E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	222087E000
Size:	8192

Details

Name:	00000004.00000002.861424578.00000000025E5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25E5000
Size:	12288

Details

Name:	00000003.00000003.843691013.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000002.1190972828.00000000010DB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10DB000
Size:	20480

Details

Name:	00000003.00000003.834509791.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000002.1192088882.00000000045F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	45F0000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000000.1006508386.0000012C0E700000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0E700000
Size:	102400

Details

Name:	0000000F.00000002.987106781.00007FF52271E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52271E000
Size:	4096

Details

Name:	00000000.00000003.863436281.00000000014CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14CC000
Size:	4096

Details

Name:	0000000F.00000002.986817164.000001FDF8900000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8900000
Size:	4096

Details

Name:	00000009.00000002.870100659.000000D4310F7000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D4310F7000
Size:	36864

Details

Name:	00000003.00000003.826840220.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000003.1001277309.000000000149A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	149A000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1148678137.000000000319D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	319D000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.866775392.0000000002510000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2510000
Size:	69632

Details

Name:	00000013.00000003.1014331154.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	73728

Details

Name:	00000004.00000003.824626202.0000000002E3A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E3A000
Size:	86016

Details

Name:	00000002.00000001.667717497.000000006E410000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000013.00000003.1014286340.0000012C0F19A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19A000
Size:	53248

Details

Name:	00000003.00000002.1193199198.00000000059BA000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59BA000
Size:	24576

Details

Name:	0000000F.00000002.986979015.00007FF521F7D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF521F7D000
Size:	4096

Details

Name:	00000002.00000003.827241608.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000002.00000003.853288736.000000000357A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	357A000
Size:	57344

Details

Name:	00000005.00000002.867193260.0000000005F23000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5F23000
Size:	8192

Details

Name:	00000014.00000002.1019274251.00000156159F0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	156159F0000
Size:	8192

Details

Name:	00000002.00000002.854573740.000000000356B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	356B000
Size:	12288

Details

Name:	00000013.00000003.1022391252.0000012C0F193000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F193000
Size:	12288

Details

Name:	00000009.00000002.870912741.00007FF5E13FC000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E13FC000
Size:	8192

Details

Name:	00000013.00000002.1033299095.00007FF5947CF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947CF000
Size:	4096

Details

Name:	00000000.00000002.1190812209.0000000000E70000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	E70000
Size:	4096

Details

Name:	00000009.00000002.870838430.00007FF5E0FD6000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E0FD6000
Size:	32768

Details

Name:	00000009.00000002.870889926.00007FF5E135D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E135D000
Size:	20480

Details

Name:	00000009.00000002.870058601.000000D430D7E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D430D7E000
Size:	8192

Details

Name:	00000005.00000002.866444657.0000000001C9C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C9C000
Size:	4096

Details

Name:	00000000.00000003.1000952955.0000000001514000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1514000
Size:	20480

Details

Name:	00000013.00000002.1032682544.0000012C0F18A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F18A000
Size:	16384

Details

Name:	0000000F.00000002.986791236.000001FDF885E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF885E000
Size:	12288

Details

Name:	00000002.00000003.826438463.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000004.00000002.862741320.0000000002F11000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	2F11000
Size:	45056

Details

Name:	00000009.00000002.870683636.000001F8AD670000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD670000
Size:	16384

Details

Name:	00000013.00000002.1032167620.0000012C0E813000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E813000
Size:	86016

Details

Name:	00000013.00000002.1032202406.0000012C0E851000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E851000
Size:	8192

Details

Name:	00000004.00000003.824636133.0000000002E33000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E33000
Size:	28672

Details

Name:	00000002.00000002.853612450.0000000002BC2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC2000
Size:	12288

Details

Name:	00000003.00000002.1191325059.0000000002A30000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2A30000
Size:	4096

Details

Name:	00000000.00000003.1135408944.00000000014CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14CC000
Size:	290816

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.1191573862.0000000002D1E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2D1E000
Size:	8192

Details

Name:	00000014.00000002.1019491418.00007DF53FB72000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB72000
Size:	4096

Details

Name:	0000000F.00000002.986756878.000001FDF8829000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8829000
Size:	73728

Details

Name:	00000003.00000003.822820996.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1190818649.0000000002604000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2604000
Size:	16384

Details

Name:	00000013.00000002.1033457232.00007FF594805000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594805000
Size:	12288

Details

Name:	0000000F.00000002.986932082.00007DF5378A0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5378A0000
Size:	4096

Details

Name:	00000014.00000002.1019643487.00007FF52AA58000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA58000
Size:	12288

Details

Name:	00000013.00000003.1017957274.0000012C0F19E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19E000
Size:	8192

Details

Name:	00000014.00000003.1018986491.0000015615A31000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A31000
Size:	114688

Details

Name:	00000005.00000002.866570632.0000000001E1F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E1F000
Size:	8192

Details

Name:	00000013.00000002.1032513048.0000012C0EF80000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	12C0EF80000
Size:	8192

Details

Name:	00000003.00000003.1148315384.000000000319D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	319D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.986860311.000001FDF8A00000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF8A00000
Size:	4096

Details

Name:	00000003.00000000.667827036.000000007F610000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	4096

Details

Name:	00000004.00000002.861891814.00000000027B4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27B4000
Size:	28672

Details

Name:	00000014.00000002.1019328352.0000015615A4E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A4E000
Size:	61440

Details

Name:	00000009.00000002.870882409.00007FF5E130B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E130B000
Size:	8192

Details

Name:	00000013.00000003.1014404160.0000012C0F19A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19A000
Size:	147456

Details

Name:	00000003.00000002.1193331789.000000006E410000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000004.00000002.861771156.0000000002733000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2733000
Size:	12288

Details

Name:	00000002.00000003.826036148.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1192930721.00000000050F0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	50F0000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.987066054.00007FF522673000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522673000
Size:	24576

Details

Name:	00000000.00000003.864476888.00000000014CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14CC000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.866729745.00000000021F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21F0000
Size:	4096

Details

Name:	00000004.00000002.861430438.0000000002604000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2604000
Size:	8192

Details

Name:	00000013.00000002.1033114493.00007FF594703000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594703000
Size:	8192

Details

Name:	00000000.00000002.1191057543.00000000013CE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	13CE000
Size:	8192

Details

Name:	00000013.00000002.1032594730.0000012C0F14C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F14C000
Size:	114688

Details

Name:	00000005.00000002.866479091.0000000001DA2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DA2000
Size:	4096

Details

Name:	00000000.00000002.1191943837.0000000003FAF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3FAF000
Size:	4096

Details

Name:	00000000.00000003.909499851.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	536576

Details

Name:	0000000D.00000002.949984735.0000002220AFE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2220AFE000
Size:	8192

Details

Name:	00000005.00000002.866821557.00000000026D0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	26D0000
Size:	32768

Details

Name:	00000014.00000002.1019534288.00007FF52A343000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A343000
Size:	8192

Details

Name:	00000000.00000002.1190799947.0000000000E40000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	E40000
Size:	4096

Details

Name:	00000005.00000003.831906124.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000000.00000003.1046554928.00000000046F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	46F1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.950363114.00007DF562E72000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E72000
Size:	4096

Details

Name:	00000013.00000003.1022478600.0000012C0F1D1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1D1000
Size:	61440

Details

Name:	00000013.00000003.1015602693.0000012C0F1B6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B6000
Size:	77824

Details

Name:	00000003.00000003.1148666034.00000000031A9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A9000
Size:	8192

Details

Name:	00000013.00000003.1013347914.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	94208

Details

Name:	00000013.00000003.1015534457.0000012C0F19A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19A000
Size:	53248

Details

Name:	00000002.00000002.853509526.0000000002B92000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B92000
Size:	4096

Details

Name:	00000003.00000002.1191333886.0000000002A40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A40000
Size:	102400

Details

Name:	00000013.00000002.1032748941.00007DF5A9970000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9970000
Size:	4096

Details

Name:	00000002.00000003.829653874.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1191197781.0000000002752000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2752000
Size:	8192

Details

Name:	0000000F.00000002.986681410.000001FDF86E0000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FDF86E0000
Size:	8192

Details

Name:	0000000F.00000002.987039132.00007FF522601000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522601000
Size:	4096

Details

Name:	00000013.00000002.1033677592.00007FF594854000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594854000
Size:	20480

Details

Name:	00000014.00000002.1019692664.00007FF52AAE1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AAE1000
Size:	20480

Details

Name:	00000004.00000002.861484576.00000000026E2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26E2000
Size:	12288

Details

Name:	00000013.00000003.1017943347.0000012C0F199000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F199000
Size:	28672

Details

Name:	00000005.00000002.867167691.000000000411E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	411E000
Size:	8192

Details

Name:	00000005.00000003.834413849.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000000.00000002.1192001594.00000000042EF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	42EF000
Size:	4096

Details

Name:	00000003.00000003.832499643.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	0000000D.00000003.949733623.00000204F6468000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6468000
Size:	28672

Details

Name:	00000005.00000002.866832104.00000000026DA000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	26DA000
Size:	110592

Details

Name:	00000002.00000002.854472795.0000000003380000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3380000
Size:	69632

Details

Name:	00000009.00000002.870118780.000000D4311FF000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D4311FF000
Size:	4096

Details

Name:	00000009.00000002.870272944.000001F8AD5D0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD5D0000
Size:	4096

Details

Name:	00000000.00000003.864401359.00000000014C9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14C9000
Size:	290816

Details

Name:	00000002.00000002.855611005.0000000006B1C000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6B1C000
Size:	16384

Details

Name:	0000000D.00000002.950275855.00000204F6489000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6489000
Size:	32768

Details

Name:	00000003.00000002.1192713084.0000000004EE8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4EE8000
Size:	4096

Details

Name:	00000013.00000003.1019771512.0000012C0F19F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19F000
Size:	397312

Details

Name:	00000013.00000002.1032818505.00007FF59405D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59405D000
Size:	4096

Details

Name:	00000003.00000003.1102384923.0000000005AC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1014370811.0000000003145000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3145000
Size:	4096

Details

Name:	00000013.00000002.1032151897.0000012C0E7A0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0E7A0000
Size:	8192

Details

Name:	00000005.00000002.867253527.000000007F0D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0D0000
Size:	20480

Details

Name:	00000009.00000002.870856732.00007FF5E11C4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E11C4000
Size:	4096

Details

Name:	00000000.00000003.1135385071.0000000001535000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1535000
Size:	8192

Details

Name:	00000000.00000002.1191065162.0000000001420000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1420000
Size:	20480

Details

Name:	00000002.00000003.828447384.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000002.00000002.854338906.0000000002C81000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C81000
Size:	12288

Details

Name:	0000000F.00000002.986620893.000000B9C06FE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C06FE000
Size:	8192

Details

Name:	0000000F.00000002.986695097.000001FDF87E0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF87E0000
Size:	4096

Details

Name:	0000000F.00000002.987045678.00007FF52261B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52261B000
Size:	8192

Details

Name:	00000000.00000002.1192425212.000000006E411000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E411000
Size:	8192

Details

Name:	00000003.00000003.841074118.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000002.1191107674.000000000144B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	144B000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
Creates a DirectInput object (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.986668628.000001FDF86B0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF86B0000
Size:	12288

Details

Name:	00000002.00000002.854440980.00000000032F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32F0000
Size:	4096

Details

Name:	00000003.00000002.1190988893.00000000026E2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26E2000
Size:	12288

Details

Name:	00000000.00000003.863490113.000000000150C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	150C000
Size:	8192

Details

Name:	00000004.00000002.862274496.0000000002B60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B60000
Size:	16384

Details

Name:	00000004.00000002.862263905.0000000002AF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF0000
Size:	4096

Details

Name:	00000003.00000002.1191217146.000000000275B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	275B000
Size:	49152

Details

Name:	00000003.00000002.1192207115.0000000003550000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3550000
Size:	356352

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000000.00000002.1190662717.0000000000B60000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	B60000
Size:	4096

Details

Name:	00000002.00000002.855476825.000000000699E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	699E000
Size:	8192

Details

Name:	00000003.00000003.879745800.00000000054EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54EB000
Size:	4096

Details

Name:	00000000.00000002.1191709827.000000000334D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	334D000
Size:	12288

Details

Name:	00000000.00000003.1136128775.0000000001531000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1531000
Size:	8192

Details

Name:	00000004.00000002.862334466.0000000002E0A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E0A000
Size:	110592

Details

Name:	00000000.00000002.1191655704.0000000003178000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3178000
Size:	4096

Details

Name:	00000013.00000002.1032428501.0000012C0ECD0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0ECD0000
Size:	12288

Details

Name:	00000013.00000002.1033723119.00007FF59486E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59486E000
Size:	16384

Details

Name:	00000002.00000003.809601273.0000000003360000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000000.00000003.1000960257.000000000151E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	151E000
Size:	4096

Details

Name:	00000003.00000002.1191704812.00000000030C0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30C0000
Size:	32768

Details

Name:	00000002.00000000.667454298.000000007F400000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F400000
Size:	4096

Details

Name:	00000000.00000003.1046440366.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	872448

Details

Name:	00000000.00000002.1191006309.000000000122B000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	122B000
Size:	20480

Details

Name:	00000003.00000003.1014714589.0000000003141000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3141000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.832867825.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1033575397.00007FF59482F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59482F000
Size:	16384

Details

Name:	00000013.00000002.1031956661.000000032CA7B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CA7B000
Size:	20480

Details

Name:	00000013.00000002.1033530143.00007FF59482C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59482C000
Size:	4096

Details

Name:	00000002.00000003.824027113.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1190844901.000000000260E000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	260E000
Size:	4096

Details

Name:	00000003.00000003.878719342.0000000003144000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3144000
Size:	4096

Details

Name:	0000000F.00000000.975065008.00007DF5378A2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5378A2000
Size:	4096

Details

Name:	0000000F.00000002.987051912.00007FF52261E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52261E000
Size:	4096

Details

Name:	00000003.00000002.1191300037.00000000027C8000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C8000
Size:	20480

Details

Name:	00000003.00000002.1191289542.00000000027C2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C2000
Size:	12288

Details

Name:	00000013.00000003.1014262502.0000012C0F1AC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1AC000
Size:	90112

Details

Name:	00000002.00000002.854424343.0000000002FD0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FD0000
Size:	4096

Details

Name:	00000000.00000002.1192444716.000000006E413000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E413000
Size:	4096

Details

Name:	0000000F.00000000.975030206.000001FDF8690000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF8690000
Size:	102400

Details

Name:	00000004.00000002.861470234.00000000026DC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26DC000
Size:	16384

Details

Name:	00000002.00000003.832666811.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1032930531.00007FF5944F1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5944F1000
Size:	4096

Details

Name:	00000003.00000003.1148010401.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.986797470.000001FDF8866000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8866000
Size:	90112

Details

Name:	00000009.00000002.870771090.00007DF4F4450000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4F4450000
Size:	20480

Details

Name:	0000000D.00000002.950513399.00007FF54DC3D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC3D000
Size:	20480

Details

Name:	00000003.00000000.667818428.000000007F600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F600000
Size:	4096

Details

Name:	00000002.00000002.855570148.00000000069A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	69A0000
Size:	4096

Details

Name:	00000013.00000003.1011947871.0000012C0F1CC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CC000
Size:	118784

Details

Name:	00000014.00000000.1007728185.00007DF53FB72000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB72000
Size:	4096

Details

Name:	00000003.00000003.967561118.000000000313E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	313E000
Size:	348160

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.950243895.00000204F644D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F644D000
Size:	106496

Details

Name:	00000004.00000002.861401866.00000000025CD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25CD000
Size:	32768

Details

Name:	00000004.00000003.831326978.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000000.00000002.1192048772.000000000446E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	446E000
Size:	8192

Details

Name:	00000009.00000002.870180816.000001F8AD4A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8AD4A0000
Size:	12288

Details

Name:	0000000D.00000002.950308362.00000204F6600000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6600000
Size:	4096

Details

Name:	00000000.00000003.1001256644.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	00000014.00000002.1019540445.00007FF52A347000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A347000
Size:	4096

Details

Name:	00000013.00000003.1009997396.0000012C0F16E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F16E000
Size:	94208

Details

Name:	00000002.00000003.828045499.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000000.00000002.1191232425.00000000014AD000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14AD000
Size:	417792

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1192881258.000000000507D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	507D000
Size:	12288

Details

Name:	00000000.00000003.1001348597.000000000151D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	151D000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.833943955.0000000000E50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	E50000
Size:	4096

Details

Name:	0000000F.00000002.987262194.00007FF52278E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52278E000
Size:	16384

Details

Name:	00000003.00000002.1193660056.000000006E48E000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E48E000
Size:	4096

Details

Name:	00000013.00000002.1032245811.0000012C0E88A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E88A000
Size:	114688

Details

Name:	00000013.00000002.1032923201.00007FF594417000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594417000
Size:	4096

Details

Name:	00000005.00000002.867160151.00000000040DC000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	40DC000
Size:	16384

Details

Name:	00000003.00000002.1191401615.0000000002AF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF0000
Size:	4096

Details

Name:	00000002.00000003.853258720.0000000003567000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3567000
Size:	28672

Details

Name:	00000002.00000000.667426229.0000000002CB3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CB3000
Size:	16384

Details

Name:	0000000F.00000002.987008823.00007FF522497000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522497000
Size:	8192

Details

Name:	00000002.00000003.840503612.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1190733178.00000000025AC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25AC000
Size:	4096

Details

Name:	0000000F.00000002.986750195.000001FDF8827000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8827000
Size:	4096

Details

Name:	00000002.00000003.838829006.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.831293760.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000002.00000002.854292564.0000000002C1F000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1F000
Size:	4096

Details

Name:	00000000.00000002.1191088839.0000000001440000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1440000
Size:	36864

Details

Name:	00000014.00000002.1019456877.00007DF43DA30000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF43DA30000
Size:	20480

Details

Name:	00000003.00000002.1192602397.0000000004AF0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4AF0000
Size:	4096

Details

Name:	0000000D.00000002.950565858.00007FF54DCEA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCEA000
Size:	8192

Details

Name:	00000005.00000003.832985673.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000013.00000002.1032619711.0000012C0F16A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F16A000
Size:	8192

Details

Name:	0000000F.00000002.986675634.000001FDF86C0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF86C0000
Size:	4096

Details

Name:	00000000.00000002.1190844257.0000000000E7C000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E7C000
Size:	4096

Details

Name:	00000003.00000002.1193310048.0000000005B38000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B38000
Size:	4096

Details

Name:	00000000.00000002.1190763870.0000000000D34000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D34000
Size:	8192

Details

Name:	00000003.00000002.1191066000.000000000270B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270B000
Size:	12288

Details

Name:	00000013.00000002.1032067232.000000032D27C000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32D27C000
Size:	16384

Details

Name:	00000003.00000002.1192303282.0000000004A10000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4A10000
Size:	733184

Details

Name:	00000004.00000003.833493468.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000005.00000002.866749653.00000000024D0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	24D0000
Size:	4096

Details

Name:	00000009.00000002.870152097.000001F8AD480000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8AD480000
Size:	102400

Details

Name:	00000002.00000003.835450109.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1193415694.000000006E415000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E415000
Size:	4096

Details

Name:	00000000.00000003.1135400182.0000000001529000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1529000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.1192072849.0000000004570000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4570000
Size:	4096

Details

Name:	00000014.00000000.1007784510.00007FF52AAE2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AAE2000
Size:	16384

Details

Name:	00000003.00000002.1191055139.0000000002703000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2703000
Size:	28672

Details

Name:	00000000.00000002.1192834893.000000006E479000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6E479000
Size:	12288

Details

Name:	00000004.00000002.862027442.0000000002A30000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2A30000
Size:	4096

Details

Name:	00000000.00000003.861328390.0000000002D70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D70000
Size:	4096

Details

Name:	00000005.00000002.866497440.0000000001DD2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD2000
Size:	12288

Details

Name:	00000000.00000002.1190941838.0000000000EA0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	EA0000
Size:	4096

Details

Name:	00000013.00000002.1032941275.00007FF594577000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594577000
Size:	8192

Details

Name:	00000013.00000003.1010944660.0000012C0F1B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B4000
Size:	114688

Details

Name:	00000005.00000002.866743735.00000000022E2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22E2000
Size:	4096

Details

Name:	0000000F.00000002.987020449.00007FF522571000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522571000
Size:	12288

Details

Name:	0000000D.00000002.949990822.0000002220BF7000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2220BF7000
Size:	36864

Details

Name:	00000002.00000000.667464307.000000007F410000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F410000
Size:	4096

Details

Name:	00000013.00000003.1016554654.0000012C0F1CF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CF000
Size:	126976

Details

Name:	00000005.00000002.866650518.0000000001EA4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EA4000
Size:	28672

Details

Name:	00000003.00000002.1193355106.000000006E411000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E411000
Size:	8192

Details

Name:	00000003.00000002.1193080599.000000000587E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	587E000
Size:	8192

Details

Name:	00000003.00000003.968546219.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000003.00000003.1014689223.00000000031A2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A2000
Size:	4096

Details

Name:	00000003.00000003.835449261.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000002.00000002.854467440.0000000003370000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3370000
Size:	20480

Details

Name:	0000000F.00000002.986586199.000000B9C04FE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C04FE000
Size:	8192

Details

Name:	00000003.00000003.822017168.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000002.1032116817.0000012C0E720000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0E720000
Size:	12288

Details

Name:	00000000.00000003.953016976.0000000001525000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1525000
Size:	106496

Details

Name:	00000002.00000002.855036771.0000000004DCE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4DCE000
Size:	8192

Details

Name:	00000002.00000002.854432527.0000000003025000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3025000
Size:	12288

Details

Name:	0000000F.00000002.986543783.000000B9BFFDE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9BFFDE000
Size:	8192

Details

Name:	00000014.00000002.1019228734.00000156158A0000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	156158A0000
Size:	4096

Details

Name:	00000003.00000002.1191523166.0000000002D62000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D62000
Size:	8192

Details

Name:	00000000.00000001.666805487.000000006E6A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E6A0000
Size:	4096

Details

Name:	00000003.00000002.1190801606.0000000002600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2600000
Size:	12288

Details

Name:	00000013.00000002.1031991312.000000032CE78000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CE78000
Size:	32768

Details

Name:	00000002.00000002.854386163.0000000002F10000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2F10000
Size:	4096

Details

Name:	00000000.00000002.1192460289.000000006E415000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E415000
Size:	4096

Details

Name:	00000000.00000003.956266883.0000000001519000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1519000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000001.692843190.000000006E410000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000005.00000002.866473595.0000000001D05000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D05000
Size:	12288

Details

Name:	00000013.00000002.1032552296.0000012C0F10E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F10E000
Size:	16384

Details

Name:	00000013.00000002.1031934161.000000032C87B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32C87B000
Size:	20480

Details

Name:	00000002.00000002.854596645.000000000357B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	357B000
Size:	53248

Details

Name:	00000005.00000002.867180351.000000000419E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	419E000
Size:	8192

Details

Name:	00000014.00000002.1019614585.00007FF52AA3A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA3A000
Size:	20480

Details

Name:	00000005.00000002.866448604.0000000001CBD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1CBD000
Size:	32768

Details

Name:	00000000.00000003.955746629.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	688128

Details

Name:	00000002.00000002.854149938.0000000002C05000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C05000
Size:	4096

Details

Name:	00000013.00000002.1032094120.0000012C0E700000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0E700000
Size:	102400

Details

Name:	00000000.00000002.1192477259.000000006E416000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E416000
Size:	40960

Details

Name:	0000000D.00000002.950492075.00007FF54DBD1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBD1000
Size:	4096

Details

Name:	00000013.00000002.1032133508.0000012C0E750000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	12C0E750000
Size:	12288

Details

Name:	00000003.00000003.1102485021.0000000003144000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3144000
Size:	323584

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.1019909876.0000012C0F763000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F763000
Size:	397312

Details

Name:	0000000F.00000002.987136076.00007FF522737000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522737000
Size:	49152

Details

Name:	00000013.00000003.1019814188.0000012C0F702000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F702000
Size:	794624

Details

Name:	00000013.00000002.1032695144.0000012C0F192000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F192000
Size:	16384

Details

Name:	00000000.00000002.1191595270.0000000002D80000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D80000
Size:	4096

Details

Name:	00000005.00000002.867058024.00000000029A1000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	29A1000
Size:	45056

Details

Name:	00000002.00000002.854437347.0000000003029000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3029000
Size:	4096

Details

Name:	00000013.00000003.1018237881.0000012C0F66A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F66A000
Size:	425984

Details

Name:	0000000F.00000002.986737743.000001FDF8813000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8813000
Size:	77824

Details

Name:	00000009.00000000.858300894.00007DF5F6582000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6582000
Size:	4096

Details

Name:	00000013.00000003.1022470338.0000012C0F19B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19B000
Size:	12288

Details

Name:	00000002.00000002.854525204.0000000003517000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3517000
Size:	4096

Details

Name:	00000000.00000002.1191344437.0000000001514000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1514000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.854312267.0000000002C36000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C36000
Size:	16384

Details

Name:	00000003.00000002.1191494642.0000000002BEC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	4096

Details

Name:	00000000.00000003.908482494.0000000001514000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1514000
Size:	8192

Details

Name:	00000002.00000003.823624830.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	0000000F.00000002.986549610.000000B9C027E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C027E000
Size:	8192

Details

Name:	00000013.00000003.1015592259.0000012C0F1AB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1AB000
Size:	40960

Details

Name:	00000004.00000002.862838104.0000000002F1F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F1F000
Size:	4096

Details

Name:	00000014.00000002.1019554155.00007FF52A9F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A9F0000
Size:	16384

Details

Name:	00000013.00000003.1008732017.0000012C0E8A5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8A5000
Size:	16384

Details

Name:	00000004.00000002.863227331.000000007FDA0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDA0000
Size:	4096

Details

Name:	00000002.00000003.809430900.0000000003579000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3579000
Size:	86016

Details

Name:	00000005.00000002.866531995.0000000001DFC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DFC000
Size:	8192

Details

Name:	00000003.00000003.967544358.000000000319B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	319B000
Size:	126976

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.1019468976.00007DF53FB60000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB60000
Size:	4096

Details

Name:	00000002.00000000.667474208.000000007F412000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F412000
Size:	4096

Details

Name:	00000000.00000002.1191077110.0000000001427000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1427000
Size:	4096

Details

Name:	00000013.00000002.1033745309.00007FF594879000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594879000
Size:	32768

Details

Name:	00000004.00000002.862589451.0000000002E32000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E32000
Size:	118784

Details

Name:	0000000F.00000000.975054612.00007DF537892000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF537892000
Size:	4096

Details

Name:	00000000.00000002.1192960879.000000007FCE2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE2000
Size:	4096

Details

Name:	00000003.00000002.1190972459.00000000026DC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26DC000
Size:	16384

Details

Name:	00000014.00000000.1007695431.00007DF53FB60000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB60000
Size:	4096

Details

Name:	0000000D.00000002.950025689.00000204F6230000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	204F6230000
Size:	4096

Details

Name:	0000000F.00000002.986628794.000000B9C07FE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9C07FE000
Size:	8192

Details

Name:	00000003.00000003.825634962.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000002.00000002.854344397.0000000002C85000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C85000
Size:	32768

Details

Name:	0000000F.00000002.987173782.00007FF52276A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52276A000
Size:	20480

Details

Name:	00000004.00000002.862987570.00000000034D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	34D0000
Size:	4096

Details

Name:	00000013.00000003.1016534291.0000012C0F1CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CE000
Size:	65536

Details

Name:	00000004.00000002.861553587.00000000026EB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26EB000
Size:	4096

Details

Name:	00000002.00000003.834509279.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1190704300.0000000002594000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2594000
Size:	45056

Details

Name:	00000000.00000003.864377229.0000000001516000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1516000
Size:	4096

Details

Name:	00000014.00000002.1019583021.00007FF52AA1C000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA1C000
Size:	4096

Details

Name:	00000003.00000002.1192146068.0000000003540000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3540000
Size:	4096

Details

Name:	00000013.00000003.1031751336.0000012C0E84D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E84D000
Size:	8192

Details

Name:	00000013.00000002.1032080830.0000012C0E6E0000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	12C0E6E0000
Size:	4096

Details

Name:	00000003.00000003.1014229947.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000005.00000002.867089972.00000000029AD000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	29AD000
Size:	8192

Details

Name:	0000000D.00000002.950575620.00007FF54DCEE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCEE000
Size:	4096

Details

Name:	00000004.00000003.829320986.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000000.00000003.861315596.0000000002D70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D70000
Size:	4096

Details

Name:	00000009.00000002.870145569.000001F8AD470000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1F8AD470000
Size:	4096

Details

Name:	00000002.00000002.855740576.000000007F402000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F402000
Size:	4096

Details

Name:	00000003.00000003.876707560.0000000003143000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3143000
Size:	8192

Details

Name:	00000004.00000002.861623180.00000000026FC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26FC000
Size:	12288

Details

Name:	0000000F.00000002.986937947.00007DF5378A2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5378A2000
Size:	4096

Details

Name:	00000000.00000003.1135463960.0000000001528000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1528000
Size:	4096

Details

Name:	00000013.00000002.1032421578.0000012C0EAD0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0EAD0000
Size:	4096

Details

Name:	00000004.00000003.830523765.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	0000000D.00000002.950554997.00007FF54DCDC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCDC000
Size:	8192

Details

Name:	00000000.00000003.1136102040.000000000153A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153A000
Size:	8192

Details

Name:	00000003.00000003.1147936796.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000009.00000002.870875635.00007FF5E12F1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E12F1000
Size:	4096

Details

Name:	00000004.00000002.862782170.0000000002F1D000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2F1D000
Size:	8192

Details

Name:	00000002.00000003.853197090.0000000004E00000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E00000
Size:	4096

Details

Name:	00000003.00000003.824428503.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1191555580.0000000002F20000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F20000
Size:	4096

Details

Name:	0000000D.00000002.950111824.00000204F6380000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6380000
Size:	16384

Details

Name:	00000004.00000002.862674691.0000000002F00000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F00000
Size:	4096

Details

Name:	00000000.00000002.1191388814.0000000001540000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1540000
Size:	36864

Details

Name:	00000003.00000003.807690535.0000000002B90000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2B90000
Size:	4096

Details

Name:	00000003.00000002.1191311854.00000000027D3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D3000
Size:	16384

Details

Name:	00000002.00000003.843685283.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000004.00000002.862928160.0000000003140000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3140000
Size:	20480

Details

Name:	0000000F.00000002.987118927.00007FF522725000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522725000
Size:	12288

Details

Name:	00000013.00000002.1032157274.0000012C0E800000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E800000
Size:	73728

Details

Name:	00000009.00000002.871119727.00007FF5E1501000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1501000
Size:	20480

Details

Name:	00000013.00000000.1006557757.00007DF5A9980000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9980000
Size:	4096

Details

Name:	0000000F.00000002.986783262.000001FDF8855000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8855000
Size:	20480

Details

Name:	00000003.00000003.879484948.0000000003148000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3148000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.950523681.00007FF54DC43000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC43000
Size:	24576

Details

Name:	00000009.00000002.870294407.000001F8AD613000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD613000
Size:	86016

Details

Name:	00000009.00000002.870861109.00007FF5E1261000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1261000
Size:	12288

Details

Name:	00000002.00000002.854419989.0000000002FC0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FC0000
Size:	16384

Details

Name:	00000002.00000002.854673958.0000000003640000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3640000
Size:	36864

Details

Name:	00000003.00000003.828848868.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	0000000D.00000002.950201684.00000204F642A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F642A000
Size:	69632

Details

Name:	00000002.00000002.854740539.0000000004C50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4C50000
Size:	733184

Details

Name:	00000000.00000003.863263019.00000000014CB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14CB000
Size:	8192

Details

Name:	00000004.00000002.861588562.00000000026F5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F5000
Size:	20480

Details

Name:	00000003.00000002.1192116793.00000000033C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33C0000
Size:	69632

Details

Name:	00000005.00000000.686009165.000000007F1D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1D0000
Size:	4096

Details

Name:	00000003.00000002.1192852381.000000000503A000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	503A000
Size:	24576

Details

Name:	00000013.00000003.1016577316.0000012C0F19C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19C000
Size:	53248

Details

Name:	00000014.00000003.1019005670.0000015615A4E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A4E000
Size:	69632

Details

Name:	00000009.00000002.870659744.000001F8AD656000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD656000
Size:	102400

Details

Name:	00000000.00000003.1046306046.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	839680

Details

Name:	0000000D.00000002.950604377.00007FF54DCF5000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCF5000
Size:	12288

Details

Name:	00000013.00000002.1033075008.00007FF5946E1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5946E1000
Size:	4096

Details

Name:	00000005.00000002.866720210.00000000021D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21D0000
Size:	16384

Details

Name:	00000014.00000002.1019677019.00007FF52AAD4000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AAD4000
Size:	20480

Details

Name:	00000003.00000000.667830199.000000007F612000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F612000
Size:	4096

Details

Name:	00000005.00000002.866545970.0000000001E09000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E09000
Size:	40960

Details

Name:	00000000.00000003.863444652.00000000014D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14D0000
Size:	253952

Details

Name:	00000004.00000002.862284802.0000000002B90000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B90000
Size:	4096

Details

Name:	0000000F.00000002.987145745.00007FF52274C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52274C000
Size:	4096

Details

Name:	00000003.00000000.667798871.0000000002A40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A40000
Size:	102400

Details

Name:	00000005.00000002.867020222.000000000290D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	290D000
Size:	12288

Details

Name:	00000002.00000003.821213214.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	0000000F.00000002.986866239.000001FDF8C00000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF8C00000
Size:	12288

Details

Name:	0000000D.00000002.950287375.00000204F6502000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6502000
Size:	12288

Details

Name:	00000004.00000002.862940754.000000000314A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	314A000
Size:	12288

Details

Name:	00000002.00000002.855686797.00000000076BE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	76BE000
Size:	8192

Details

Name:	00000014.00000002.1019303539.0000015615A36000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15615A36000
Size:	61440

Details

Name:	00000005.00000003.833942906.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000014.00000002.1019546336.00007FF52A6E1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A6E1000
Size:	4096

Details

Name:	00000004.00000002.862922578.000000000310E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	310E000
Size:	8192

Details

Name:	00000000.00000003.1089784066.0000000001531000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1531000
Size:	57344

Details

Name:	00000003.00000003.836116640.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000003.864733400.000000000375B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	375B000
Size:	4096

Details

Name:	00000009.00000002.870720260.000001F8AD708000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD708000
Size:	24576

Details

Name:	00000009.00000003.869811083.000001F8AD650000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD650000
Size:	126976

Details

Name:	00000004.00000002.862269118.0000000002B40000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B40000
Size:	4096

Details

Name:	00000002.00000002.855751287.000000007F410000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F410000
Size:	4096

Details

Name:	00000013.00000002.1032450683.0000012C0EE50000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12C0EE50000
Size:	4096

Details

Name:	00000009.00000002.870804902.00007DF5F65A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F65A0000
Size:	12288

Details

Name:	00000013.00000003.1017893392.0000012C0F1BC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1BC000
Size:	73728

Details

Name:	00000009.00000002.870936858.00007FF5E141B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E141B000
Size:	45056

Details

Name:	00000013.00000003.1010894537.0000012C0F177000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F177000
Size:	106496

Details

Name:	00000013.00000002.1033362866.00007FF5947EC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947EC000
Size:	8192

Details

Name:	00000005.00000002.867037190.000000000298E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	298E000
Size:	8192

Details

Name:	00000009.00000002.870038842.000000D430C7B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D430C7B000
Size:	20480

Details

Name:	00000003.00000002.1191678819.0000000003047000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3047000
Size:	12288

Details

Name:	00000014.00000002.1019608344.00007FF52AA34000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA34000
Size:	4096

Details

Name:	00000000.00000003.1135452493.000000000151D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	151D000
Size:	16384

Details

Name:	00000002.00000003.831260491.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000002.1193160041.000000000593F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	593F000
Size:	4096

Details

Name:	0000000F.00000002.987151572.00007FF52274F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52274F000
Size:	16384

Details

Name:	00000009.00000002.870193981.000001F8AD4B0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8AD4B0000
Size:	4096

Details

Name:	00000014.00000002.1019650677.00007FF52AA5E000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA5E000
Size:	16384

Details

Name:	00000013.00000002.1032146928.0000012C0E780000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E780000
Size:	4096

Details

Name:	00000005.00000002.866454942.0000000001CC8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1CC8000
Size:	12288

Details

Name:	00000004.00000002.863009790.00000000049EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49EE000
Size:	8192

Details

Name:	0000000D.00000002.950428641.00007FF54D54D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D54D000
Size:	4096

Details

Name:	00000013.00000003.1009025228.0000012C0E7F0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E7F0000
Size:	4096

Details

Name:	00000013.00000003.1020845176.0000012C0F19E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19E000
Size:	4096

Details

Name:	00000002.00000002.854410347.0000000002F7A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F7A000
Size:	24576

Details

Name:	0000000D.00000002.950334180.00000204F6C02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6C02000
Size:	4096

Details

Name:	00000004.00000002.862698027.0000000002F10000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2F10000
Size:	4096

Details

Name:	00000013.00000002.1032826626.00007FF594102000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594102000
Size:	4096

Details

Name:	0000000F.00000003.986322765.000001FDF8861000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8861000
Size:	110592

Details

Name:	00000014.00000002.1019416327.0000015615E40000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15615E40000
Size:	69632

Details

Name:	00000003.00000003.878727158.0000000003148000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3148000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.1192922839.000000007FCD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	4096

Details

Name:	00000013.00000003.1019497588.0000012C0F1B0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B0000
Size:	4096

Details

Name:	0000000F.00000002.987180932.00007FF522774000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522774000
Size:	20480

Details

Name:	00000013.00000002.1032181093.0000012C0E829000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E829000
Size:	73728

Details

Name:	0000000D.00000002.950137288.00000204F6402000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6402000
Size:	65536

Details

Name:	00000005.00000002.866513339.0000000001DE5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DE5000
Size:	20480

Details

Name:	00000009.00000002.871062252.00007FF5E1486000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1486000
Size:	8192

Details

Name:	0000000F.00000002.986971250.00007FF521F77000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF521F77000
Size:	16384

Details

Name:	00000009.00000002.870894994.00007FF5E1363000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1363000
Size:	24576

Details

Name:	00000009.00000002.870954075.00007FF5E143C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E143C000
Size:	4096

Details

Name:	0000000F.00000002.986944153.00007DF5378B0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5378B0000
Size:	12288

Details

Name:	00000000.00000003.1136115196.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	00000004.00000000.676763037.000000007FD92000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD92000
Size:	4096

Details

Name:	00000002.00000003.853265870.000000000356F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	356F000
Size:	40960

Details

Name:	00000005.00000002.867174005.000000000415E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	415E000
Size:	8192

Details

Name:	00000009.00000002.871048570.00007FF5E147E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E147E000
Size:	16384

Details

Name:	00000013.00000002.1033695642.00007FF59485F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59485F000
Size:	8192

Details

Name:	0000000D.00000003.949758585.00000204F644A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	204F644A000
Size:	4096

Details

Name:	0000000D.00000002.950448760.00007FF54D8C5000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D8C5000
Size:	4096

Details

Name:	00000003.00000003.1014695265.00000000031A6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A6000
Size:	8192

Details

Name:	0000000D.00000002.950346693.00007DF562E60000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E60000
Size:	4096

Details

Name:	00000000.00000003.863867951.00000000014CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14CC000
Size:	4096

Details

Name:	00000004.00000002.863193794.0000000006F50000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F50000
Size:	4096

Details

Name:	00000013.00000002.1032879777.00007FF594372000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594372000
Size:	4096

Details

Name:	00000005.00000002.866680212.0000000001EC3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EC3000
Size:	16384

Details

Name:	00000002.00000002.854373692.0000000002CA2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA2000
Size:	12288

Details

Name:	00000003.00000003.1013569898.0000000003146000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3146000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1102547470.00000000031A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A4000
Size:	4096

Details

Name:	00000013.00000002.1032361723.0000012C0E8F2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8F2000
Size:	61440

Details

Name:	00000013.00000002.1033786573.00007FF5948EA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5948EA000
Size:	12288

Details

Name:	0000000D.00000002.950328646.00000204F6980000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6980000
Size:	4096

Details

Name:	0000000D.00000000.934891387.00007DF562E60000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E60000
Size:	4096

Details

Name:	00000013.00000002.1031950204.000000032C97E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32C97E000
Size:	8192

Details

Name:	00000003.00000002.1190769309.00000000025EB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25EB000
Size:	4096

Details

Name:	00000005.00000000.686002082.0000000001EC3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EC3000
Size:	16384

Details

Name:	00000003.00000002.1191205974.0000000002756000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2756000
Size:	16384

Details

Name:	00000000.00000003.864461236.0000000001514000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1514000
Size:	8192

Details

Name:	00000013.00000002.1032709132.0000012C0F198000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F198000
Size:	8192

Details

Name:	00000000.00000002.1191717164.0000000003350000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3350000
Size:	65536

Details

Name:	00000003.00000003.1014391200.0000000003145000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3145000
Size:	4096

Details

Name:	00000004.00000002.862013696.00000000027C8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C8000
Size:	12288

Details

Name:	00000003.00000003.1102475282.00000000031A5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A5000
Size:	16384

Details

Name:	00000013.00000003.1013277260.0000012C0F195000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F195000
Size:	53248

Details

Name:	0000000F.00000002.987002887.00007FF5222F5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5222F5000
Size:	4096

Details

Name:	00000009.00000000.858321286.00007DF5F65A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F65A0000
Size:	12288

Details

Name:	00000003.00000003.821615153.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000009.00000000.858294448.00007DF5F6580000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6580000
Size:	4096

Details

Name:	00000003.00000002.1190890247.0000000002615000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2615000
Size:	12288

Details

Name:	00000013.00000003.1020771564.0000012C0F1B0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B0000
Size:	61440

Details

Name:	00000003.00000002.1193625144.000000006E479000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6E479000
Size:	12288

Details

Name:	00000003.00000002.1191127154.0000000002727000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2727000
Size:	12288

Details

Name:	00000005.00000002.867241344.00000000067D0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67D0000
Size:	4096

Details

Name:	00000003.00000003.1013554082.00000000031A3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A3000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.829250881.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1032776873.00007DF5A9990000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9990000
Size:	12288

Details

Name:	00000004.00000002.862019362.00000000027D3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D3000
Size:	16384

Details

Name:	00000013.00000003.1017882664.0000012C0F1B1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B1000
Size:	4096

Details

Name:	00000003.00000003.874250330.0000000003020000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3020000
Size:	4096

Details

Name:	00000013.00000003.1017837222.0000012C0F1B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B2000
Size:	90112

Details

Name:	00000014.00000002.1019183542.0000001A8A91F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1A8A91F000
Size:	4096

Details

Name:	00000003.00000002.1193292131.0000000005AC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.1032910023.00007FF5943D5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5943D5000
Size:	4096

Details

Name:	0000000D.00000002.949959870.0000002220A7B000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2220A7B000
Size:	20480

Details

Name:	0000000D.00000002.950654672.00007FF54DD1C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD1C000
Size:	4096

Details

Name:	00000000.00000002.1192019522.000000000442E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	442E000
Size:	8192

Details

Name:	0000000D.00000002.950455480.00007FF54DA67000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DA67000
Size:	8192

Details

Name:	00000002.00000002.854459727.0000000003340000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3340000
Size:	4096

Details

Name:	00000003.00000003.836632681.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000003.1019505471.0000012C0F1BB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1BB000
Size:	73728

Details

Name:	00000003.00000002.1191233498.00000000027A1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A1000
Size:	12288

Details

Name:	00000013.00000003.1020798520.0000012C0F16D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F16D000
Size:	98304

Details

Name:	00000004.00000002.861897312.00000000027C2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C2000
Size:	12288

Details

Name:	00000000.00000003.954017063.000000000151C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	151C000
Size:	40960

Details

Name:	00000005.00000002.866462277.0000000001CD5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1CD5000
Size:	12288

Details

Name:	00000002.00000000.667478618.000000007F420000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F420000
Size:	12288

Details

Name:	00000013.00000002.1033375846.00007FF5947FA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947FA000
Size:	8192

Details

Name:	00000013.00000002.1033135715.00007FF59474D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59474D000
Size:	20480

Details

Name:	00000003.00000003.923370191.000000000318B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	318B000
Size:	24576

Details

Name:	00000004.00000002.862297714.0000000002BD0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BD0000
Size:	8192

Details

Name:	00000004.00000002.862960279.0000000003350000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3350000
Size:	69632

Details

Name:	00000005.00000002.866664685.0000000001EB2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EB2000
Size:	12288

Details

Name:	00000009.00000002.870917708.00007FF5E140A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E140A000
Size:	8192

Details

Name:	00000003.00000003.968565220.0000000003144000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3144000
Size:	323584

Details

Name:	00000002.00000002.855654479.0000000006B34000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6B34000
Size:	4096

Details

Name:	00000003.00000002.1193586588.000000006E477000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E477000
Size:	8192

Details

Name:	0000000F.00000002.987126228.00007FF52272B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52272B000
Size:	45056

Details

Name:	00000000.00000003.1001356497.0000000001528000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1528000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.1019659516.00007FF52AA69000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA69000
Size:	12288

Details

Name:	0000000F.00000002.987159206.00007FF522757000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522757000
Size:	28672

Details

Name:	0000000D.00000000.934962032.00007FF54DDE2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DDE2000
Size:	16384

Details

Name:	00000002.00000002.853626351.0000000002BD5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD5000
Size:	20480

Details

Name:	00000002.00000003.824428110.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000002.00000003.833671836.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000000.00000002.1191664242.000000000328B000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	328B000
Size:	20480

Details

Name:	00000003.00000003.1148295497.00000000031A9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A9000
Size:	8192

Details

Name:	00000004.00000002.861708137.0000000002727000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2727000
Size:	12288

Details

Name:	00000000.00000003.1136144298.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	00000004.00000002.861885854.00000000027A5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A5000
Size:	32768

Details

Name:	00000002.00000002.854175493.0000000002C07000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C07000
Size:	12288

Details

Name:	00000003.00000002.1192073675.00000000031A4000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	31A4000
Size:	8192

Details

Name:	00000003.00000003.1014709277.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000004.00000002.862308761.0000000002BE0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BE0000
Size:	4096

Details

Name:	00000013.00000002.1033049266.00007FF5946AA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5946AA000
Size:	4096

Details

Name:	00000003.00000002.1191780646.0000000003126000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3126000
Size:	446464

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.870886343.00007FF5E130E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E130E000
Size:	4096

Details

Name:	0000000F.00000002.986686828.000001FDF87C0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FDF87C0000
Size:	16384

Details

Name:	00000004.00000002.863143060.0000000006A3E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6A3E000
Size:	8192

Details

Name:	00000000.00000003.1134880036.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	471040

Details

Name:	00000002.00000002.855339327.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000005.00000002.867104080.00000000029B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B0000
Size:	4096

Details

Name:	00000013.00000003.1008973317.0000012C0E7F0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E7F0000
Size:	4096

Details

Name:	00000013.00000002.1032898644.00007FF5943C6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5943C6000
Size:	32768

Details

Name:	0000000F.00000002.987269174.00007FF522796000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522796000
Size:	8192

Details

Name:	00000000.00000003.956465445.000000000355C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	355C000
Size:	471040

Details

Name:	0000000F.00000002.987167035.00007FF522764000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522764000
Size:	4096

Details

Name:	00000002.00000003.825232304.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	0000000D.00000002.950705688.00007FF54DD44000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD44000
Size:	20480

Details

Name:	00000013.00000003.1020756914.0000012C0F19F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19F000
Size:	53248

Details

Name:	00000002.00000003.809462594.0000000003572000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3572000
Size:	28672

Details

Name:	00000013.00000002.1033326463.00007FF5947DF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947DF000
Size:	8192

Details

Name:	00000002.00000002.855780965.000000007F420000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F420000
Size:	12288

Details

Name:	0000000D.00000002.950076817.00000204F6280000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6280000
Size:	4096

Details

Name:	00000002.00000003.844623983.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000005.00000002.867271560.000000007F1E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E0000
Size:	4096

Details

Name:	00000003.00000002.1193728997.000000007F500000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F500000
Size:	20480

Details

Name:	00000005.00000002.866860572.0000000002700000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2700000
Size:	12288

Details

Name:	00000003.00000002.1190776957.00000000025F0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25F0000
Size:	12288

Details

Name:	00000000.00000000.666034350.000000007FCE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE0000
Size:	4096

Details

Name:	0000000D.00000002.950232280.00000204F643C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F643C000
Size:	53248

Details

Name:	00000009.00000002.870759065.000001F8ADB80000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8ADB80000
Size:	4096

Details

Name:	00000000.00000002.1191038168.0000000001240000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1240000
Size:	4096

Details

Name:	00000003.00000002.1193272678.0000000005A40000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	4096

Details

Name:	00000013.00000003.1017993260.0000012C0F19E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F19E000
Size:	319488

Details

Name:	0000000D.00000000.934910196.00007DF562E70000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF562E70000
Size:	4096

Details

Name:	00000004.00000002.862950002.0000000003150000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3150000
Size:	36864

Details

Name:	00000013.00000002.1032993884.00007FF594634000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594634000
Size:	4096

Details

Name:	00000003.00000003.1013489777.0000000005AC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.1135747188.0000000001536000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1536000
Size:	8192

Details

Name:	00000005.00000002.866641251.0000000001E95000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E95000
Size:	32768

Details

Name:	00000000.00000002.1191902474.0000000003DAF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3DAF000
Size:	4096

Details

Name:	00000004.00000002.861387387.00000000025AC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25AC000
Size:	4096

Details

Name:	00000014.00000002.1019235268.00000156158C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	156158C0000
Size:	102400

Details

Name:	00000002.00000003.805749913.0000000003340000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3340000
Size:	4096

Details

Name:	0000000D.00000002.950007722.0000002220CFF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2220CFF000
Size:	4096

Details

Name:	00000013.00000003.1015507545.0000012C0F172000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F172000
Size:	73728

Details

Name:	0000000D.00000002.950127905.00000204F6400000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6400000
Size:	4096

Details

Name:	00000002.00000003.834977962.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000002.00000002.854552855.000000000354A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	354A000
Size:	106496

Details

Name:	00000004.00000002.862863685.0000000002F30000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F30000
Size:	20480

Details

Name:	00000014.00000000.1007701209.00007DF53FB62000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB62000
Size:	4096

Details

Name:	0000000D.00000002.950769559.00007FF54DD6D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD6D000
Size:	16384

Details

Name:	00000000.00000003.908446123.00000000014C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14C7000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.1033734067.00007FF594876000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594876000
Size:	8192

Details

Name:	00000002.00000002.855597448.0000000006ADE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6ADE000
Size:	8192

Details

Name:	00000013.00000002.1033591869.00007FF594837000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594837000
Size:	28672

Details

Name:	00000000.00000003.1000927222.00000000014C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14C7000
Size:	311296

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.870735246.000001F8AD800000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F8AD800000
Size:	4096

Details

Name:	00000000.00000003.1001714211.0000000001529000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1529000
Size:	4096

Details

Name:	00000005.00000003.866236406.00000000045C8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	45C8000
Size:	4096

Details

Name:	00000013.00000002.1032961497.00007FF5945BB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5945BB000
Size:	12288

Details

Name:	00000003.00000002.1191530138.0000000002D66000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D66000
Size:	4096

Details

Name:	00000002.00000003.830054335.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000002.00000002.854968403.0000000004D8E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D8E000
Size:	8192

Details

Name:	00000003.00000002.1193769153.000000007F600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F600000
Size:	4096

Details

Name:	00000003.00000003.1147961435.0000000003145000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3145000
Size:	319488

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.1019382620.0000015615C40000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15615C40000
Size:	36864

Details

Name:	00000005.00000002.867122386.00000000029CA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29CA000
Size:	12288

Details

Name:	00000002.00000002.855714991.000000007F400000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F400000
Size:	4096

Details

Name:	00000005.00000002.866403557.0000000000080000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	80000
Size:	4096

Details

Name:	00000000.00000002.1192413366.000000006E410000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000003.00000002.1193210586.00000000059FE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FE000
Size:	8192

Details

Name:	00000013.00000003.1018313171.0000012C0F66A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F66A000
Size:	425984

Details

Name:	00000005.00000002.866756041.00000000024E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24E0000
Size:	4096

Details

Name:	0000000D.00000002.950588281.00007FF54DCF0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCF0000
Size:	16384

Details

Name:	00000000.00000003.834142248.0000000000E50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	E50000
Size:	4096

Details

Name:	00000014.00000002.1019624035.00007FF52AA44000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AA44000
Size:	20480

Details

Name:	00000013.00000002.1032916618.00007FF594415000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594415000
Size:	4096

Details

Name:	00000003.00000002.1193526661.000000006E441000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E441000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000003.00000003.844255295.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000002.00000003.832465944.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000004.00000002.863130079.00000000069BF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	69BF000
Size:	4096

Details

Name:	00000004.00000002.863236495.000000007FDA2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDA2000
Size:	4096

Details

Name:	00000004.00000003.832938419.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000014.00000002.1019215318.0000001A8AD7E000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1A8AD7E000
Size:	8192

Details

Name:	00000004.00000002.862910894.00000000030CD000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30CD000
Size:	12288

Details

Name:	00000013.00000002.1033151655.00007FF594753000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594753000
Size:	24576

Details

Name:	00000003.00000002.1191177329.000000000273F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	273F000
Size:	4096

Details

Name:	00000003.00000003.967611304.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1192041406.0000000003194000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3194000
Size:	36864

Details

Name:	00000003.00000003.969543522.00000000052EC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	52EC000
Size:	471040

Details

Name:	00000013.00000002.1032037149.000000032CFFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CFFE000
Size:	8192

Details

Name:	00000004.00000002.861436707.0000000002615000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2615000
Size:	12288

Details

Name:	00000013.00000003.1010994368.0000012C0F1B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B4000
Size:	114688

Details

Name:	00000003.00000003.1147581210.00000000031A9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A9000
Size:	69632

Details

Name:	00000013.00000003.1011967787.0000012C0F1AD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1AD000
Size:	126976

Details

Name:	00000014.00000000.1007735268.00007DF53FB80000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB80000
Size:	12288

Details

Name:	00000000.00000003.1136088071.0000000004762000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4762000
Size:	4096

Details

Name:	00000003.00000002.1193805152.000000007F602000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F602000
Size:	4096

Details

Name:	00000000.00000003.908407192.0000000001499000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1499000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.866600589.0000000001E42000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E42000
Size:	8192

Details

Name:	00000005.00000000.686013312.000000007F1D2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1D2000
Size:	4096

Details

Name:	00000003.00000003.1014350159.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	16384

Details

Name:	00000000.00000002.1192536573.000000006E441000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E441000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000002.866673669.0000000001EB8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EB8000
Size:	12288

Details

Name:	00000002.00000003.833136832.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000003.00000003.841711817.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1190671061.00000000024C9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24C9000
Size:	8192

Details

Name:	00000004.00000002.862320446.0000000002CBC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CBC000
Size:	4096

Details

Name:	0000000F.00000002.986895489.00007DF435760000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF435760000
Size:	20480

Details

Name:	00000005.00000002.866594286.0000000001E31000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E31000
Size:	16384

Details

Name:	00000013.00000003.1012816186.0000012C0F1CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1CE000
Size:	90112

Details

Name:	00000003.00000003.874241089.0000000003020000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3020000
Size:	4096

Details

Name:	0000000D.00000002.950293286.00000204F6508000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6508000
Size:	24576

Details

Name:	00000003.00000002.1191361678.0000000002A9C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A9C000
Size:	16384

Details

Name:	00000002.00000002.854415552.0000000002FBB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FBB000
Size:	20480

Details

Name:	00000002.00000003.830858249.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000004.00000003.830925216.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	0000000D.00000002.950798468.00007FF54DDE1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DDE1000
Size:	20480

Details

Name:	00000002.00000003.841039401.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1033827431.00007FF5948F1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5948F1000
Size:	20480

Details

Name:	00000000.00000002.1191463651.00000000018D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18D0000
Size:	356352

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000002.00000003.820814061.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000000.00000002.1191956922.00000000040AA000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	40AA000
Size:	24576

Details

Name:	00000013.00000003.1016500877.0000012C0F1AE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1AE000
Size:	28672

Details

Name:	00000005.00000002.866695181.000000000213A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	213A000
Size:	24576

Details

Name:	00000013.00000002.1032852168.00007FF5942DE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5942DE000
Size:	12288

Details

Name:	00000004.00000003.833939375.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000014.00000002.1019340722.0000015615A5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A5E000
Size:	4096

Details

Name:	00000002.00000002.853475246.0000000002AC5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC5000
Size:	12288

Details

Name:	00000009.00000002.870200381.000001F8AD4D0000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1F8AD4D0000
Size:	8192

Details

Name:	00000003.00000002.1191435157.0000000002B80000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2B80000
Size:	4096

Details

Name:	00000004.00000002.863002589.000000000496F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	496F000
Size:	4096

Details

Name:	00000003.00000003.876712230.0000000003148000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3148000
Size:	249856

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.836116250.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1033061069.00007FF5946C1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5946C1000
Size:	8192

Details

Name:	00000013.00000003.1015482057.0000012C0F169000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F169000
Size:	12288

Details

Name:	00000009.00000002.870793734.00007DF5F6590000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5F6590000
Size:	4096

Details

Name:	00000009.00000002.870963731.00007FF5E1447000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1447000
Size:	28672

Details

Name:	00000003.00000003.827643640.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000013.00000002.1032292508.0000012C0E8A9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8A9000
Size:	16384

Details

Name:	00000013.00000002.1033491542.00007FF594817000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594817000
Size:	49152

Details

Name:	00000013.00000000.1006564340.00007DF5A9982000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A9982000
Size:	4096

Details

Name:	0000000F.00000002.986994502.00007FF5222E6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5222E6000
Size:	32768

Details

Name:	00000013.00000002.1032808875.00007FF594057000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594057000
Size:	16384

Details

Name:	00000000.00000003.864540551.0000000001514000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1514000
Size:	8192

Details

Name:	00000002.00000002.853453540.0000000002A8C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A8C000
Size:	4096

Details

Name:	00000013.00000002.1032233168.0000012C0E87A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E87A000
Size:	61440

Details

Name:	00000000.00000003.1135768198.0000000001529000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1529000
Size:	4096

Details

Name:	00000002.00000000.667433517.0000000002F20000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F20000
Size:	102400

Details

Name:	00000003.00000000.667833633.000000007F620000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F620000
Size:	12288

Details

Name:	00000002.00000003.823222392.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	0000000F.00000002.987076035.00007FF522684000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522684000
Size:	4096

Details

Name:	00000013.00000003.1015634897.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	151552

Details

Name:	00000003.00000003.1058341040.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	36864

Details

Name:	00000002.00000002.853447956.0000000002A83000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A83000
Size:	4096

Details

Name:	00000013.00000002.1032332819.0000012C0E8D8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8D8000
Size:	24576

Details

Name:	00000013.00000003.1018119882.0000012C0F1C5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1C5000
Size:	212992

Details

Name:	00000013.00000003.1016602478.0000012C0F1B8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1B8000
Size:	65536

Details

Name:	0000000D.00000003.949764519.00000204F6449000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6449000
Size:	4096

Details

Name:	00000003.00000003.876740428.0000000003183000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3183000
Size:	8192

Details

Name:	00000013.00000003.1017864578.0000012C0F1A0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1A0000
Size:	53248

Details

Name:	00000004.00000003.834408469.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000013.00000002.1032400356.0000012C0E913000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E913000
Size:	8192

Details

Name:	00000005.00000003.834143488.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000002.00000003.824830388.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000002.00000002.854240536.0000000002C0F000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C0F000
Size:	8192

Details

Name:	00000014.00000002.1019317304.0000015615A46000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A46000
Size:	28672

Details

Name:	00000003.00000003.874267246.0000000003020000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3020000
Size:	4096

Details

Name:	0000000D.00000002.950042281.00000204F6250000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6250000
Size:	102400

Details

Name:	00000003.00000003.1014339625.0000000003194000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3194000
Size:	28672

Details

Name:	00000004.00000002.861691344.0000000002719000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2719000
Size:	40960

Details

Name:	00000004.00000002.861448427.00000000026B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B2000
Size:	4096

Details

Name:	00000004.00000002.861369828.00000000025A3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A3000
Size:	4096

Details

Name:	00000002.00000002.853649606.0000000002BE3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE3000
Size:	28672

Details

Name:	00000002.00000003.844153856.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000005.00000002.866588991.0000000001E2F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E2F000
Size:	4096

Details

Name:	00000013.00000003.1031739906.0000012C0E84F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E84F000
Size:	16384

Details

Name:	00000000.00000003.1001342513.0000000001514000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1514000
Size:	20480

Details

Name:	00000013.00000002.1033004083.00007FF594636000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594636000
Size:	4096

Details

Name:	00000004.00000003.824698893.0000000002BB0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BB0000
Size:	4096

Details

Name:	00000002.00000002.854306266.0000000002C32000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32000
Size:	8192

Details

Name:	00000000.00000002.1192939482.000000007FCD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD2000
Size:	4096

Details

Name:	00000000.00000003.863244327.00000000014C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14C3000
Size:	4096

Details

Name:	00000003.00000002.1193252105.0000000005A3F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A3F000
Size:	4096

Details

Name:	00000003.00000003.1148685163.00000000031A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A4000
Size:	8192

Details

Name:	00000002.00000002.854324846.0000000002C3B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C3B000
Size:	49152

Details

Name:	00000002.00000003.821615708.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000004.00000000.676773637.000000007FDB0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDB0000
Size:	12288

Details

Name:	00000003.00000002.1191724694.00000000030CA000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30CA000
Size:	368640

Details

Name:	00000014.00000002.1019268216.00000156159D0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	156159D0000
Size:	4096

Details

Name:	00000003.00000003.1148303060.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000004.00000003.830121446.0000000002BF0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000000.00000002.1190740090.0000000000BD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BD0000
Size:	16384

Details

Name:	00000000.00000003.1135004423.0000000001537000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1537000
Size:	32768

Details

Name:	00000003.00000003.969520274.00000000054EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	54EB000
Size:	8192

Details

Name:	00000002.00000003.836585150.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1031940999.000000032C8FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32C8FE000
Size:	8192

Details

Name:	00000002.00000003.822017738.0000000004DE0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000014.00000002.1019562971.00007FF52A9F5000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A9F5000
Size:	12288

Details

Name:	00000009.00000002.870082131.000000D430EFE000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D430EFE000
Size:	8192

Details

Name:	00000002.00000003.841106494.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000013.00000002.1032310595.0000012C0E8BF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8BF000
Size:	20480

Details

Name:	00000000.00000002.1191880420.000000000375E000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	375E000
Size:	8192

Details

Name:	00000002.00000002.853622150.0000000002BCB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	4096

Details

Name:	00000003.00000003.1058307054.0000000003145000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3145000
Size:	319488

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1191388038.0000000002AE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	16384

Details

Name:	00000002.00000002.854580170.000000000356F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	356F000
Size:	40960

Details

Name:	00000002.00000002.854246307.0000000002C13000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C13000
Size:	12288

Details

Name:	00000004.00000003.860683021.0000000004E18000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E18000
Size:	4096

Details

Name:	00000005.00000002.866735776.00000000022DE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22DE000
Size:	12288

Details

Name:	00000014.00000002.1019374196.0000015615C35000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	15615C35000
Size:	8192

Details

Name:	00000003.00000003.832700452.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000003.879454123.000000000318C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	318C000
Size:	4096

Details

Name:	00000013.00000002.1033091287.00007FF5946FB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5946FB000
Size:	8192

Details

Name:	0000000F.00000002.987275202.00007FF522799000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF522799000
Size:	12288

Details

Name:	00000003.00000003.1148672557.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000000.00000003.1000912993.00000000014AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14AD000
Size:	102400

Details

Name:	00000013.00000002.1032046278.000000032D07F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32D07F000
Size:	4096

Details

Name:	00000003.00000002.1193473815.000000006E420000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E420000
Size:	135168

Details

Name:	00000003.00000003.1102450514.0000000005B38000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B38000
Size:	4096

Details

Name:	00000013.00000002.1031977280.000000032CC77000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CC77000
Size:	36864

Details

Name:	00000003.00000002.1191505013.0000000002BED000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2BED000
Size:	8192

Details

Name:	00000005.00000003.831372614.0000000002703000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2703000
Size:	28672

Details

Name:	00000000.00000002.1191044990.00000000012C0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	12C0000
Size:	24576

Details

Name:	00000003.00000003.830088163.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000002.1190720100.00000000025A3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A3000
Size:	4096

Details

Name:	00000013.00000003.1011016241.0000012C0F198000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F198000
Size:	114688

Details

Name:	00000005.00000002.866806627.00000000026A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A0000
Size:	12288

Details

Name:	00000003.00000002.1192728542.0000000004F7C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F7C000
Size:	16384

Details

Name:	00000002.00000003.853300979.0000000003567000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3567000
Size:	28672

Details

Name:	0000000D.00000002.950731663.00007FF54DD58000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DD58000
Size:	12288

Details

Name:	00000000.00000002.1191360615.0000000001528000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1528000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.853516438.0000000002BA9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BA9000
Size:	12288

Details

Name:	00000003.00000003.923427207.0000000003144000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3144000
Size:	290816

Details

Name:	00000014.00000002.1019221255.0000001A8ADFC000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1A8ADFC000
Size:	16384

Details

Name:	00000013.00000003.1011033441.0000012C0F602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F602000
Size:	114688

Details

Name:	0000000D.00000002.950264912.00000204F6470000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F6470000
Size:	61440

Details

Name:	00000009.00000002.870945014.00007FF5E1427000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1427000
Size:	49152

Details

Name:	00000004.00000002.862934616.0000000003147000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3147000
Size:	8192

Details

Name:	00000003.00000002.1192089634.00000000031B9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	4096

Details

Name:	00000000.00000003.1090840139.00000000045F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45F1000
Size:	913408

Details

Name:	00000013.00000003.1019698651.0000012C0F1C6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1C6000
Size:	200704

Details

Name:	00000013.00000002.1033423232.00007FF594800000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594800000
Size:	16384

Details

Name:	00000003.00000002.1191425442.0000000002B60000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B60000
Size:	16384

Details

Name:	00000000.00000003.1000966503.0000000001528000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1528000
Size:	4096

Details

Name:	00000014.00000003.1019024481.0000015615A4E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15615A4E000
Size:	69632

Details

Name:	00000004.00000001.678042127.000000006E410000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000009.00000002.871070603.00007FF5E1489000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1489000
Size:	12288

Details

Name:	00000005.00000003.833742010.00000000026C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26C0000
Size:	4096

Details

Name:	00000009.00000002.870706253.000001F8AD700000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD700000
Size:	4096

Details

Name:	00000013.00000002.1032720407.0000012C0F600000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F600000
Size:	8192

Details

Name:	00000009.00000002.871085726.00007FF5E14F4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E14F4000
Size:	20480

Details

Name:	00000004.00000002.861854144.000000000275B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	275B000
Size:	49152

Details

Name:	00000002.00000003.837054117.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000000.00000002.1191159846.0000000001467000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1467000
Size:	282624

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.855770889.000000007F412000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F412000
Size:	4096

Details

Name:	00000004.00000000.676743955.0000000002A40000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A40000
Size:	102400

Details

Name:	00000004.00000002.861522712.00000000026E6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26E6000
Size:	4096

Details

Name:	00000002.00000002.854539294.0000000003540000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3540000
Size:	32768

Details

Name:	00000009.00000000.858368768.00007FF5E1502000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1502000
Size:	16384

Details

Name:	00000003.00000003.840539005.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000003.967408164.0000000005AC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC1000
Size:	491520

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.1033012811.00007FF594641000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF594641000
Size:	4096

Details

Name:	00000002.00000002.854254941.0000000002C1A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1A000
Size:	16384

Details

Name:	00000013.00000002.1033770627.00007FF5948E4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5948E4000
Size:	20480

Details

Name:	0000000D.00000002.950020711.0000002220DFF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2220DFF000
Size:	4096

Details

Name:	00000003.00000002.1193141137.00000000058FE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	58FE000
Size:	8192

Details

Name:	00000003.00000002.1193454375.000000006E416000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E416000
Size:	40960

Details

Name:	0000000F.00000002.987188408.00007FF52277F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52277F000
Size:	8192

Details

Name:	0000000D.00000002.950499938.00007FF54DBEB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBEB000
Size:	8192

Details

Name:	00000009.00000002.870852189.00007FF5E1187000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1187000
Size:	8192

Details

Name:	00000009.00000002.870049771.000000D430CFE000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D430CFE000
Size:	8192

Details

Name:	00000000.00000002.1192949899.000000007FCE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE0000
Size:	4096

Details

Name:	00000002.00000002.853438888.0000000001039000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1039000
Size:	12288

Details

Name:	00000013.00000002.1032354331.0000012C0E8EB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E8EB000
Size:	24576

Details

Name:	00000013.00000003.1017929650.0000012C0F196000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F196000
Size:	40960

Details

Name:	00000002.00000002.855578919.0000000006A9E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6A9E000
Size:	8192

Details

Name:	00000000.00000003.1001302479.00000000014AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	14AD000
Size:	417792

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.987088328.00007FF52270A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52270A000
Size:	4096

Details

Name:	00000003.00000003.826437812.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000009.00000002.870958629.00007FF5E143F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E143F000
Size:	16384

Details

Name:	00000004.00000002.862303194.0000000002BD4000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BD4000
Size:	4096

Details

Name:	00000009.00000002.870066355.000000D430E7C000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D430E7C000
Size:	16384

Details

Name:	0000000D.00000002.950339431.00007DF460D30000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF460D30000
Size:	20480

Details

Name:	0000000D.00000002.950777545.00007FF54DDD4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DDD4000
Size:	20480

Details

Name:	00000002.00000002.854500484.0000000003500000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3500000
Size:	4096

Details

Name:	00000002.00000003.843450982.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	0000000D.00000002.950314063.00000204F6800000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F6800000
Size:	12288

Details

Name:	00000004.00000002.861676714.0000000002710000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2710000
Size:	32768

Details

Name:	00000003.00000002.1190835637.0000000002609000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2609000
Size:	4096

Details

Name:	00000003.00000002.1191262924.00000000027B4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27B4000
Size:	28672

Details

Name:	00000000.00000002.1192851388.000000006E48E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E48E000
Size:	4096

Details

Name:	00000009.00000002.870900166.00007FF5E1374000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5E1374000
Size:	4096

Details

Name:	00000003.00000002.1193835694.000000007F610000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	4096

Details

Name:	00000002.00000003.842848826.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000000.00000002.1190988059.00000000011ED000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	11ED000
Size:	12288

Details

Name:	00000013.00000002.1032654372.0000012C0F174000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F174000
Size:	69632

Details

Name:	00000003.00000003.828447814.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000000.00000000.665980025.0000000000B70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	102400

Details

Name:	00000004.00000002.863178877.0000000006F38000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6F38000
Size:	12288

Details

Name:	00000003.00000003.823222786.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000014.00000000.1007713992.00007DF53FB70000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB70000
Size:	4096

Details

Name:	00000005.00000002.866411498.0000000000090000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	90000
Size:	102400

Details

Name:	00000003.00000002.1191007141.00000000026E6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26E6000
Size:	4096

Details

Name:	00000009.00000002.870278918.000001F8AD600000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F8AD600000
Size:	73728

Details

Name:	0000000F.00000002.986702492.000001FDF8800000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FDF8800000
Size:	4096

Details

Name:	00000013.00000002.1033292911.00007FF5947CB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5947CB000
Size:	8192

Details

Name:	00000013.00000002.1033103635.00007FF5946FE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5946FE000
Size:	4096

Details

Name:	00000000.00000003.1135392560.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	00000003.00000003.1058352841.0000000003141000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3141000
Size:	12288

Details

Name:	00000013.00000003.1016590407.0000012C0F1AD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0F1AD000
Size:	4096

Details

Name:	00000003.00000003.825232716.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000003.00000003.823624427.0000000002BC0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2BC0000
Size:	4096

Details

Name:	00000005.00000002.867199754.00000000063C0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	63C0000
Size:	4096

Details

Name:	0000000D.00000003.949672616.00000204F647F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	204F647F000
Size:	36864

Details

Name:	00000002.00000002.854463409.0000000003360000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3360000
Size:	12288

Details

Name:	00000013.00000002.1032007369.000000032CF78000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CF78000
Size:	32768

Details

Name:	00000002.00000003.837522975.0000000004DF0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	4096

Details

Name:	00000014.00000002.1019483106.00007DF53FB70000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53FB70000
Size:	4096

Details

Name:	00000003.00000003.1014214754.000000000319B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	319B000
Size:	32768

Details

Name:	00000000.00000003.1136122352.000000000152B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	152B000
Size:	4096

Details

Name:	00000013.00000002.1032208894.0000012C0E856000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C0E856000
Size:	98304

Details

Name:	00000003.00000002.1191410204.0000000002B40000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B40000
Size:	8192

Details

Name:	00000000.00000002.1192902498.000000007FBD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBD0000
Size:	20480

Details

Name:	00000000.00000003.833741236.0000000000E50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	E50000
Size:	4096

Details

Name:	0000000D.00000002.950120022.00000204F63A0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	204F63A0000
Size:	4096

Details

Name:	00000002.00000002.853523546.0000000002BBC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBC000
Size:	16384

Details

Name:	00000003.00000002.1191187020.0000000002741000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2741000
Size:	16384

Details

Name:	00000003.00000002.1191663401.0000000003040000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3040000
Size:	20480

Details

Name:	00000003.00000003.924461756.0000000005469000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5469000
Size:	466944

Details

Name:	0000000D.00000002.950785129.00007FF54DDDA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DDDA000
Size:	12288

Details

Name:	00000000.00000003.1000877481.000000000153E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	153E000
Size:	4096

Details

Name:	00000002.00000002.853617475.0000000002BC6000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC6000
Size:	4096

Details

Name:	0000000F.00000002.986640977.000001FDF8680000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1FDF8680000
Size:	4096

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps